154
From the manpage:
PermitRootLogin
Specifies whether root can log in using ssh(1). The argument
must be “yes”, “without-password”, “forced-commands-only”, or
"no”. The default is “yes”.
If this option is set to “without-password”, password
authentication is disabled for root.
If this option is set to “forced-commands-only”, root ...
133
You can use the following command to add the fingerprint for a server to your known_hosts
ssh-keyscan -H <ip-address> >> ~/.ssh/known_hosts
ssh-keyscan -H <hostname> >> ~/.ssh/known_hosts
NOTE: Replace < ip-address > and < hostname > with the IP and dns name of the server you want to add.
The only issue with this is that you ...
94
The best resource to help you begin setting up an ssh service on a Host machine using Ubuntu is OpenSSH Server. This will allow you to use SSH File Transfer Protocol (also Secure File Transfer Protocol, or SFTP) to access, transfer, and manage files over SSH from a Client machine.
Overview of Solution
On Ubuntu you can setup an OpenSSH server on a Host ...
67
Sometimes it is more convenient to have configuration files in our home directory. This avoids having to be root to edit files, and also they can be configured in a way that other users have no access to this data. In addition this configuration will be backed up with our home and also will "survive" an OS upgrade.
To do so we can make a ssh configuration ...
57
Method 1 :
This can be achieved with vino vnc server & remmina (both come default with ubuntu; if not install it by running sudo apt-get install remmina). Then Run Following commands from local computer in terminal prompt:
ssh -Y gman@remote. Use trusted X11 forwarding, otherwise it wont work
vino-preferences. It will open vino-preferences.
Also ...
51
Step 1 : Install OpenSSH package if not installed
sudo apt-get install openssh-server
Step 2 : Create separate group for SFTP users.
sudo addgroup ftpaccess
Step 3 : Edit /etc/ssh/sshd_config file and make changes as below.
Find and comment below line.
#Subsystem sftp /usr/lib/openssh/sftp-server
and add these lines to the end of the file.
Subsystem ...
50
Have you tried just simply setting
sudo systemctl enable ssh
?
That's how I have my ssh set to run at start up.
****I'm leaving in the above part of the answer in case it's helpful for others who come across this post****
Quoting my comment from above:
How do you have your port forwarding setup? I don't use the ListenAddress at all and things work ...
47
IP address conflict turned out to be the root cause when I was seeing this SSH error message.
After reading the answers above I suspected an IP address conflict, but needed to prove that address conflict was or was not the problem.
This great article showed how to use arp-scan to see if two pieces of hardware were claiming the same IP address.
In my case the ...
44
My favourite method allows the private key to be selected automatically
IdentityFile ~/.ssh/%l_%r@%h_id_rsa
SSH will replace %l with the local machine name, %r with the remote username, and %h with the remote host, thus if I wanted to connect from my machine called foo to bar as user, I run:
ssh bar
And ssh would automatically use:
~/.ssh/foo_user@...
34
None of the answers above worked for me. I fixed my ubuntu system by doing the following:
/usr/bin/ssh-keygen -A
33
Check the file /Users/alexzeitler/.ssh/id_rsa. What is there? How did it get there?
It should be your private RSA key, isn't it? And is there something in /Users/alexzeitler/.ssh/id_rsa.pub? Is it valid public key?
If you don't use these keys, remove both of them and the message will disappear. If you are using them in different way, move them somewhere else....
32
Ok... Simple: Let's ask the package manager aptitude search ssh. You will get a rather large output, but I'll pick a few for you:
i A openssh-client - secure shell (SSH) client, for secure acce
p openssh-server - secure shell (SSH) server, for secure acce
p ssh - secure shell client and ...
29
I'm a bit late with this response, but the sensible way would be to do a ssh-keyscan on the new machine before you run the uptime gathering.
ssh-keyscan <newhost> >> ~/.ssh/known_hosts
Disabling the sanity check for convenience sake sounds like a bad plan, even if you think you're totally in control of the environment.
27
With the official final release Ubuntu for Phones ships the "android-gadget-service" tool with which you can manage adb, mtp, USB tethering and ssh.
Connect your device via USB, enable Developer Mode in:
"System-Settings->About This Phone->Developer Mode"
...and run (from your PC, make sure to have the phone screen unlocked, else adb will refuse to let ...
24
First of all, the correct command is:
ssh user@my.external.ip.address
And the router should be configured to forward the SSH port 22 to your server's local IP address.
For further debugging:
1) Check that port 22 (SSH) is open on your server and on the router (port forwarding).
2) Check that the SSH server is running on your server
3) Use ping, ssh -v ...
20
First you need to upload public key to the server you are willing to connect to, public key is in .pub file:
Example:
# ssh-copy-id -i ~/my-certificate.pub root@12.34.56.78
After this it should be working and you should be able to login using:
$ sudo ssh -i ~/my-certificate.pem root@12.34.56.78
Changes are made in file ~/.ssh/authorized_keys on server ...
19
The command
systemctl disable ssh
did it for me.
@Jakuje: Thanks for giving me the idea.
18
The answer to your proper question is: you can't. I think the main problem is that the authentication procedures will be out of sync. It Just Doesn't Work Like That.
As you have yourself noticed, the solution is to use screen when possible (by the way, tmux is an alternative to screen).
18
To activate ssh access entirely over wifi, without developer mode on the phone, without any special tooling on your computer and without using USB:
If you don't already have an ssh keypair, type ssh-keygen on your computer and follow the instructions to generate one.
Install the Terminal app on the phone from the App Store.
Open a Terminal and type (this is ...
18
You can use this one-liner to regenerate both files in one shot. You'll need to restart Apache after the cert has been re-created.
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/ssl-cert-snakeoil.key -out /etc/ssl/certs/ssl-cert-snakeoil.pem
If you're at all concerned about security (and you should be), then you should ...
18
Actually this setting does pretty much nothing if you are using PAM authentication. At the bottom of the sshd_config configuration file you will find:
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# ...
18
Just remove these packages to let you use apt for other packages.
Execute this commands in terminal.
sudo apt-get remove openssh-server openssh-client --purge && sudo apt-get autoremove && sudo apt-get autoclean && sudo apt-get update
Then reinstall openssh server and client .
sudo apt-get install openssh-server openssh-client
17
Use arping on the IP address that is having connection issues. That will show the MAC address for each ping reply, and hopefully will unmask the rogue MAC address.
arping 192.168.2.254
You should check the DHCP IP address pool on the DHCP server, make sure no devices have static IPs that collide with the DHCP pool.
These clues point to duplicate IP:
...
17
Quick answer:
SSH is not the problem. The command you use to reboot is the problem: don't do reboot now, do reboot or shutdown -r now to reboot your system.
The command syntax (since 13.04) has been:
reboot [OPTION]... [REBOOTCOMMAND]
The REBOOTCOMMAND never existed before. In 12.04, your now was just ignored but now it's being used... And it's breaking ...
17
The term "server" means a piece of software that offers a service to clients. A server usually waits for a client to contact it, and then sends the reply to the client. For further information, read about the Client-Server-Model
OpenSSH server
SSH (Secure Shell) is a protocol to get encrypted remote access to a machine. The machine you want to ...
16
While you can't reattach to a broken SSH session, you can reparent the process running inside SSH – functionally equivalent to what you want.
Instructions
In your case, you would take over the apt-get process to be controlled from a new SSH session, screen session or the like. My favourite for this is the reptyr command:
$ sudo apt-get install reptyr
$ ps ...
15
Unless you configure hostnames in a central location, there's no way for your laptop to know the hostname you configured on the Ubuntu server.
So if when you installed the ubuntu server you named it "bonkers", it's understandable that on the laptop ssh bonkers will not do anything, as the laptop has no idea about that hostname.
Possible solutions:
On your ...
15
Using a car analogy:
PGP is a car
OpenPGP is the design for the PGP car
GnuPG is another car using the same design
RSA is a diesel engine, and other engines are available
SSH isn't a car at all. But it uses engines.
RSA is a public-key cryptosystem. That is, it is an algorithm for encrypting, decrypting and signing data using a set of two keys (the public ...
14
Thnx for the help. That solved it. My permissions needed to be set as 700 for .ssh. 600 for .ssh/, making sure you do it on both machines. Also change the ownership of .ssh/. and .ssh/ to the user from root, otherwise any information in the config file will not be accessible to the user.
sudo chmod 700 ~/.ssh/
sudo chmod 600 ~/.ssh/*
sudo chown -R User ~/....
14
OpenSSH server is now (as of 13-Sep-2013) pre-loaded with Ubuntu Touch install.
However, it is also disabled by default.
You also don't want SSH operating from root.
You need to type the following, using a USB connection to the device:
adb shell
su - phablet
sudo tee /etc/init/ssh.override < /dev/null
To revert to disabled
echo "manual" | sudo tee /...
Only top voted, non community-wiki answers of a minimum length are eligible
