Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

New answers tagged

0

I had the same problem and it's due to a change in Yocto version previous version was installing libcrypto.so.1 as part of glibc now it's a package called libcrypto-....rpm so when you remove the /lib/libcrypto* you force ssh to reuse the one under /usr/lib


0

You can monitor /var/log/authlog and use awk to send you a message whenever a specific line matches: tail -f /var/log/authlog | awk '/Accepted pubkey/ { system("mail -s " $0 " admin@example.com << EOF\nEOF") }' You can of course replace /Accepted pubkey/ with some other pattern that fits your case. I chose to send empty emails with the log line as a ...


0

create a file inside ~/.ssh/config and paste below content Host * SendEnv LANG LC_* Ciphers +aes256-cbc


1

First your router is not just a router, it is also a ethernet switch, a DHCP server, A wifi hotspot, a modem, … 2nd it should be routed the best way: if on same sub-net 192.168.0.x then it will be routed by the machines, and not go through the router (not the router part of the router, just the ethernet switch). What happens when you use a domain name e.g....


0

On CentOS 7 you can use jeroennijhof/pam_script to do just what you want. Install the rpm: sudo yum install epel-release.noarch sudo yum install pam_script Add these lines to this file /etc/pam.d/sshd: auth optional /usr/lib64/security/pam_script.so auth sufficient /usr/lib64/security/pam_radius_auth.so #added to include radius create the scripts ...


2

Your problem is that host keys are just that, they are a key for the host. There is really only supposed to be one per host. Of course there are several because there are several types of key, but I would avoid relying on key types to give you multiple acceptable keys for a single host. On the server side My first suggestion is that you consider ...


2

Older versions of the ssh-keygen utility from OpenSSH displayed only MD5 hashes; the utility now defaults to displaying a SHA256 hash, although you can still select an MD5 hash using the -E option: user@host:~/.ssh$ ssh-keygen -E md5 -l -f samplekey 2048 MD5:e6:1f:73:0f:14:cb:9a:71:2f:3b:31:b7:3f:58:1c:52 user@host (RSA) user@host:~/.ssh$ ssh-keygen -E ...


4

No and yes, in that order. The purpose of hashing the line is to obscure the hosts that you have previously connected to, so it's the very purpose of the hash function to make it (for practical purposes) impossible to tell what hostname belongs to it. By extension, you cannot really make wildcards work with hashed hostnames: if I want to connect to ...


1

A server is trusted when it matches the pattern before the fingerprint hash. ssh just adds both hostname and IP by default which requires to match both of them. Nothing holds you from editing known_hosts manually and replace IP with a mask (recommended) or remove IP at all (less secure way). So the entry in known_hosts would look like: hostname,192.168.1.* ...


1

Many ways to do this, one way is use StrictHostKeyChecking no while doing ssh to your hosts, it will not make any entry in known_hosts. ssh -o StrictHostKeyChecking=no <ip> Or ssh -o UserKnownHostsFile=/dev/null <ip> Or you can alter you .ssh/config file according to your need.


1

Create a separate RSA key just for rsync to use. Do not put a passphrase on that key. Give it a unique name, such as id_rsa_rsync for the private key and id_rsa_rsync.pub for the public key. On the server, install the public key on a new line of ~/.ssh/authorized_keys, like this: (server)$ cat << EOF >> .ssh/authorized_keys command="rsync",no-...


2

OpenSSH sftp returns 0 on success and 1 on error. No further distinction is provided. To test, if any file exists in a directory before trying to download them, you can use: echo "ls /remote/path/*" | sftp -b - user@example.com if [ $? -eq 0 ] then echo "Files exist, can download now" echo 'get /remote/path/* /local/path/' | sftp -b - user@...


Top 50 recent answers are included