Questions tagged [ssh]

Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

Secure Shell or SSH is a network protocol that allows data to be exchanged using a secure channel between two networked devices. Used primarily on Linux and Unix based systems to access shell accounts, SSH was designed as a replacement for Telnet and other insecure remote shells, which send information, notably passwords, in plaintext, rendering them susceptible to packet analysis.

It's important to note that there are two versions of SSH (1 and 2), and that version 1 is no longer considered secure, and should be replaced by version 2 where ever possible.

More information, including the more notable SSH-1 vulnerabilities, can be found at the Wikipedia page for SSH.

8868 questions
4
votes
0 answers

Match address rule in sshd_config, , difference between localhost, 127.0.0.1 and [::1]

I would like to understand why these three rules in sshd_config behave differently : Match host localhost PasswordAuthentication yes Match address 127.0.0.1 PasswordAuthentication yes Match address ::1 PasswordAuthentication yes Assume…
hello world
  • 123
  • 3
  • 8
4
votes
2 answers

Cannot start sshd service: Failed to start openssh.service: Unit not found

On a virtual rhel 7.4 I'm getting a weird error when trying to start the sshd service. Failed to start openssh.service: Unit not found In fact, I get the same error when trying anything on sshd - enable, status or stop I did try to restart the…
Cat Hariss
  • 61
  • 1
  • 1
  • 4
4
votes
1 answer

Get list of forwarded ports

My system has several port forwarding settings active. Among others, I have some Vagrant machines with port-forwarding configured: Vagrant.configure("2") do |config| config.vm.network "forwarded_port", guest: 22, host: 33022 …
blueFast
  • 4,200
  • 13
  • 37
  • 54
4
votes
1 answer

AWS Network ACLs Breaking SSH Connectivity

I'm trying to set up Network ACLs as a second security layer for production instances. It seems that every time I associate a non-default Network ACL to my private subnet it breaks all SSH connectivity. I'm not sure what I'm doing wrong. The…
4
votes
0 answers

AWS: ssh_exchange_identification: read: Connection reset by peer

I am facing "ssh_exchange_identification: read: Connection reset by peer" error. I am not able to ssh my instance. Any help is highly appreciated. Thank you. Below is the debug information ssh -i ~/.ssh/aaa.pem ubuntu@52.xxx.xx.xx -v OpenSSH_7.2p2…
Dora
  • 341
  • 1
  • 5
  • 15
4
votes
1 answer

force ssh to use agent, without fallback to directly accessing the IdentityFile

Company policy requires some ssh keys to be stored securely, e.g. on dedicated USB device. Using keys not stored on the host machine works flawlessly using gnupg with enable-ssh-support, even when multiple keys are used: Host example.com …
anx
  • 8,963
  • 5
  • 24
  • 48
4
votes
1 answer

Unable to SSH onto GCE VM after reboot

I have a Ubuntu 16.04 LTS VM which I rebooted to apply updates to, but have got the following when trying to connect to SSH through the browser console since: Connection failed We are unable to connect to the VM on port 22. The serial output…
user3333099
  • 39
  • 2
  • 6
4
votes
1 answer

OpenSSH local port binding for a remote host with jumps

I am running OpenSSH_7.6p1 and i have found very convenient the ProxyJump feature (e.g. -J ) Is it possible to bind a port on localhost that is mapped to a remote ssh session accessible with jumps? For example I would like to: ssh -J…
4
votes
1 answer

sshd_config AllowUsers and IPv6

Have two servers communicating via ssh and crontab, a "master" and a "slave". Only the master can connect (execute command) on the slave. Authentication was done automatically (IPv4) thanks to master's ~/.ssh/id_rsa.pub added to slave's…
Déjà vu
  • 5,546
  • 9
  • 36
  • 55
4
votes
3 answers

ssh restrictions for user authentication

RHEL 6.8, i have a user locally authenticated and not entirely certain if that user has setup key based logins already from another node to connect to the node in question. I'm thinking of regenerating the ssh keys for the user in order to prevent…
user2967267
  • 113
  • 1
  • 6
4
votes
2 answers

How to list all OpenSSH supported authentication methods?

I am running Debian Linux jessie with OpenSSH version 6.7. I use the AuthenticationMethods directive in /etc/ssh/sshd_config. I know that these strings are recognized by…
user35042
  • 2,681
  • 12
  • 34
  • 60
4
votes
1 answer

ssh with key content instead of identity_file

Instead of ssh -i mykey.pem I would like to pass the content of mykey.pem to the ssh command. Is that possible somehow? Background: the mykey.pem is stored encryptedly. I would like to decrypt it on the fly (in a CI tool) and pass it to ssh.…
kev
  • 261
  • 1
  • 5
  • 13
4
votes
2 answers

will MaxSessions/MaxStartups fix ssh "connection refused" message?

UPDDATE AT BOTTOM --> I’m using a Red Hat Enterprise Linux Server release 7.4 (Maipo) VM in my OS class of about 20 students who generally launch about two ssh connections to this machine with their own specific user ids. This seems to work fine as…
Levon
  • 143
  • 1
  • 1
  • 6
4
votes
3 answers

gcloud SSH connection asks for password instead of passphrase

I've got two VMs set up on Google Cloud Platform. server1 uses an Ubuntu 16.04 image [g1-small (1 vCPU, 1.7 GB memory)]; and the newly created VM, called server2, uses a CoreOS Stable image [f1-micro (1 vCPU, 0.6 GB memory)]. The main problem is I…
fillipvt
  • 181
  • 1
  • 1
  • 9
4
votes
2 answers

SSH known_hosts with a dynamic IP

I have a machine behind a firewall. I connect to it remotely using a VPN tunneling with a port forward through ssh. To connect to the machine I use the external IP of the VPN and my personal and temporary assigned port. The command I use is: ssh…
Ilmanowar
  • 51
  • 1
  • 5