I have a DNS entry to host name which resolve to two or more IP address. It seems like we are getting MITM warning due to this intentional configuration. What is the way to overcome this. Should we disable StrictHostKeyChecking but that would not be a good idea. I am wondering what is the recommendations.

One of my ESXI servers is not responding,  however, the VM's are active.  Is there a command that I can run from SSH to restart services without interrupting the VM's or do I have to reboot the entire box? If so where do I begin?

How can we show the TOKEN value while sshing to a remote server?

from the man page of sshd_config I see belows:

TOKENS
     Arguments to some keywords can make use of tokens, which are expanded at runtime:

           %%    A literal `%'.
           %D    The routing domain in which the incoming connection was received.
           %F    The fingerprint of the CA key.
           %f    The fingerprint of the key or certificate.
           %h    The home directory of the user.
           %i    The key ID in the certificate.
           %K    The base64-encoded CA key.
           %k    The base64-encoded key or certificate for authentication.
           %s    The serial number of the certificate.
           %T    The type of the CA key.
           %t    The key or certificate type.
           %U    The numeric user ID of the target user.
           %u    The username.

Select all Open in new window

and from the man page of ssh_config I find belows:

TOKENS
     Arguments to some keywords can make use of tokens, which are expanded at runtime:

           %%    A literal `%'.
           %C    Hash of %l%h%p%r.
           %d    Local user's home directory.
           %h    The remote hostname.
           %i    The local user ID.
           %L    The local hostname.
           %l    The local hostname, including the domain name.
           %n    The original remote hostname, as given on the command line.
           %p    The remote port.
           %r    The remote username.
           %T    The local tun(4) or tap(4) network interface assigned if tunnel forwarding was requested, or "NONE" otherwise.
           %u    The local username.

Select all Open in new window

Basically I want them to expand to some echo command so that I can see what is the current value when I ssh to a box, both from the client side and server side. I would really appreciate if someone can direct on how to achive it.

Best Regards!

We know that in private public key authentication ssh client sends its public to to ssh-server. I would like to know if there is way we can log the public key of the client in ssh log file. Or is there a way to achieve it? Any direction in this would be highly appreciated.

Best Regards.

I am trying to compile openssh from source and would like to know if there is any option which can help me to disable SOCKS support of sshd so what when client execute

ssh -D <port number> <hostname>

Select all Open in new window

then it should not act like Dynamic proxy. Though I only want openssh to support remote forwarding on individual port but not dynamic proxy. Please let me know if there is a way.

Thank you!

I would like to use ChallengeResponseAuthentication directive in sshd_config want to set it yes. Basically I want a user to say/type yes before he attempts provide his password.

I am wondering how it can be achieved.

Thanks in advance!

I am running below from my mac laptop

ssh -f -N -T -R2222:localhost:22 ec2-user@app.my_aws_host.com

Select all Open in new window

and per my understanding when I do below below from any other ssh client then I should be connected ( ssh ) to my mac laptop

ssh ec2-user@app.my_aws_host.com -p 2222

Select all Open in new window

But I am getting connection refused error. Appreciate any help here

P.S: port 2222 is open in my security group in AWS

I have an Ubuntu server running 10.04.6 LTS.  It is providing web services.  I have setup sftp and given permission to an 'sftp' group to login but have set their root directory to be /var/www/html.  They are able to connect to the server but cannot write to the folder.  I use setfacl to give the group write permission.  If they are already logged in, they can now create folders and files.  However, once they logout, they can no longer login.   If I remove the acl, the condition reverses again.  It is not limited to acls though.  I even tried just giving 'other' write-access.  Same thing happened.

sshd_config snippet:
Match group sftp
ChrootDirectory /var/www/html
X11Forwarding no
ForceCOmmand internal-sftp

Error when trying to write:
Permission denied.
Error code: 3
Error message from server: Permission denied

Error when trying to login (from session log):
! 2019-12-11 08:23:42.538 Using username "ddinkin".
. 2019-12-11 08:23:42.569 Server offered these authentication methods: publickey,password
. 2019-12-11 08:23:42.569 Prompt (password, "SSH password", <no instructions>, "&Password: ")
. 2019-12-11 08:23:44.955 Sent password
. 2019-12-11 08:23:44.963 Access granted
. 2019-12-11 08:23:44.963 Opening session as main channel
. 2019-12-11 08:23:45.127 Network error: Software caused connection abort
* 2019-12-11 08:23:45.181 (EFatal) Network error: Software caused connection abort
* 2019-12-11 08:23:45.181 Authentication log (see session log for …

How to check if a remote ssl cert has expired using IP address  On mac terminal

I have two accounts with the same hosting provider.  They allow SSH access.  I created backup copies of websites on one account that I need to move to the other account.

I can move them individually, explicitly with "wget" but if I try to just pull all files from that one directory it fails.

Here is the command I am using, there are NO other sub-directories, just a bunch of files in one directory that I want to copy over from Account A to Account B.

wget -nc --level=1 --recursive --no-parent --accept jpa <url>/backups/

All I get when I run that command in the SSH portal is an "index.html" file and nothing more.  No error, just that one file (which is then automatically removed because it is not on my accept list).

I see other people (in general) are having a similar issue on StackOverflow (for example).

Server restriction maybe?  Problem with the command?

Thanks. :)

Need to SSH to my AWS Ubuntu server from Mac Terminal

I opened Terminal, executed
sudo su (to become super user)

changed directories so that my current folder shows my KeyPair1.pem file and when I execute

ls - l

I see my .pem file has the following permissions:

-r--------@

please explain this. It's Read access for who exactly?

I ran "chmod 400 KeyPair1.pem" as a way to protect the file from being over-written, Is this the correct thing to do?


I have the IP address of my Ubuntu server:

I execute the same command provided by AWS, but find the terminal locks. I am forced to press Ctrl+C to get the cursor again:

ssh -i "KeyPair1.pem" ubuntu@1.2.3.4

Does anyone see what's wrong?

When I type ssh <ENTER> I get:
usage: ssh [-46******************Yy] [-B bind_interface]
           [-b bind_address] [-c cipher_spec] [-D [bind_address:]port]
           [-E log_file] [-e escape_char] [-F configfile] [-I pkcs11]
           [-i identity_file] [-J [user@]host[:port]] [-L address]
           [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
           [-Q query_option] [-R address] [-S ctl_path] [-W host:port]
           [-w local_tun[:remote_tun]] destination [command]

Does this mean SSH is installed?

Is there a way to see what variant of SSH is installed?

Thanks