SSH - Revision history

Tinker at 20:52, 27 December 2021

2021-12-27T20:52:14Z

Tinker: /* Transferring files */

2021-09-22T00:38:44Z

Transferring files

Tinker: /* Transferring files */

2021-09-22T00:13:55Z

Transferring files

Tinker: /* Make it easier to connect */

2021-06-07T06:08:22Z

Make it easier to connect

Tinker: /* Port forwarding (AKA Tunnelling) */

2021-06-07T06:05:22Z

Port forwarding (AKA Tunnelling)

Tinker at 05:55, 7 June 2021

2021-06-07T05:55:49Z

Tinker: /* Some SSH reference Links */

2020-08-29T17:42:06Z

Some SSH reference Links

Tinker: /* Troubleshooting */

2020-07-22T04:17:02Z

Troubleshooting

Tinker at 04:05, 22 July 2020

2020-07-22T04:05:30Z

Tinker: Created page with " [https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint] ===Troubleshooting=== If you get crap like:

2020-07-22T04:03:00Z
Created page with " [https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]  ===Troubleshooting===  If you get crap like: <pre class="bbcodeblock" dir="ltr" style="mar..."
New page


[https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]



===Troubleshooting===



If you get crap like:

<pre class="bbcodeblock" dir="ltr" style="margin: 0px; margin-right: -99999px; padding: 3px; border: 1px inset; width: 98%; height: 82px; text-align: left; overflow: auto">Warning: the ECDSA host key for '<snip>' differs from the key for the IP address '<snip>'

Offending key for IP in /home/<snip>/.ssh/known_hosts:14

Matching host key in /home/<snip>/.ssh/known_hosts:12

Are you sure you want to continue connecting (yes/no)?</pre>



or maybe:



<pre class="bbcodeblock" dir="ltr" style="margin: 0px; margin-right: -99999px; padding: 3px; border: 1px inset; width: 98%; text-align: left; overflow: auto">

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that a host key has just been changed.

The fingerprint for the RSA key sent by the remote host is

SHA256:'<snip>'

Please contact your system administrator.

Add correct host key in /home/user/.ssh/known_hosts to get rid of this message.

Offending RSA key in /home/user/.ssh/known_hosts:102

  remove with:

  ssh-keygen -f "/home/user/.ssh/known_hosts" -R '<snip>'

RSA host key for '<snip>' has changed and you have requested strict checking.

Host key verification failed.

</pre>



when you try to ssh to a machine...



<code>sudo ssh-keygen -f ~/.ssh/known_hosts -R HOSTIP</code>



Messages like:



<pre class="bbcodeblock" dir="ltr" style="margin: 0px; margin-right: -99999px; padding: 3px; border: 1px inset; width: 98%; text-align: left; overflow: auto">

Warning: the RSA host key for '<snip>' differs from the key for the IP address '<snip>'

Offending key for IP in /home/user/.ssh/known_hosts:102

Matching host key in /home/user/.ssh/known_hosts:103

Are you sure you want to continue connecting (yes/no)? 

</pre>



mean that you have an extra entry in your known_hosts file & indicates the line you want to delete...



===Some SSH reference Links===



*[http://matt.might.net/articles/ssh-hacks/ SSH Tricks]

*[https://www.tecmint.com/ssh-passwordless-login-using-ssh-keygen-in-5-easy-steps/ SSH Passwordless Login Using SSH Keygen in 5 Easy Steps]

*[https://cormachogan.com/2016/04/13/ssh-esxi-hosts-without-providing-password/ How to SSH between ESXi 6.0U2 hosts without providing a password]

← Older revision		Revision as of 20:52, 27 December 2021
Line 1:		Line 1:
		+	<span style="background-color: rgb(153, 204, 0); color: rgb(0, 0, 255);" data-mce-style="background-color: #99cc00; color: #0000ff;">'''<big>Now on Wiki.NerdMage.Ca</big>'''</span>

	[https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]		[https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]

@@ Line 41: / Line 41: @@
 From the local machine to a remote machine:
-*<code>scp '''FileName'<nowiki/>'''''user@MACHINENAME:Destination'<nowiki/>''</code>
+*<code>scp '''FileName''' '''<nowiki>user@MACHINENAME:Destination</nowiki>'''</code>
 From a remote machine to the local machine:
-*<code>scp '''user@MACHINENAME:FileNameDestination'''</code>
+*<code>scp '''user@MACHINENAME:FileName Destination'''</code>
 From a remote machine to another remote machine:

@@ Line 13: / Line 13: @@
 *<code>ssh-copy-id '''user@MACHINENAME'''</code>
 **This can be done for as many remote machines as you like.
 This will simplify your life.  From this point on, any time you SSH into (or SCP to/from etc...) the machine known as '''MACHINENAME''' while working at the machine you've done this on, you'll be automagically authenticated.
@@ Line 44: / Line 45: @@
 From a remote machine to the local machine:
-*<code>scp'''user@MACHINENAME:FileNameDestination'''</code>
+*<code>scp '''user@MACHINENAME:FileNameDestination'''</code>
 From a remote machine to another remote machine:
-*<code>scp'''user@MACHINENAME:FileName user@OTHERMACHINENAME:Destination'''</code>
+*<code>scp '''user@MACHINENAME:FileName user@OTHERMACHINENAME:Destination'''</code>
 Starting to see a pattern?

@@ Line 9: / Line 9: @@
 *<code>ssh-keygen</code>
-**(Note: You only have to do this step once.)
+**(Note: You only have to do this step once on any particular machine.)
 **The passphrase is optional.
 *<code>ssh-copy-id '''user@MACHINENAME'''</code>
+**This can be done for as many remote machines as you like.
 This will simplify your life.  From this point on, any time you SSH into (or SCP to/from etc...) the machine known as '''MACHINENAME''' while working at the machine you've done this on, you'll be automagically authenticated.

@@ Line 7: / Line 7: @@
 ==Make it easier to connect==
 Don't use password authentication. Use [https://www.ssh.com/academy/ssh/public-key-authentication Public Key Authentication].
 * <code>ssh-keygen</code>
-** (Note: You only have to do this step once.)
+*<code>ssh-keygen</code>
-** The passphrase is optional.
+**(Note: You only have to do this step once.)
-* <code>ssh-copy-id '''user@MACHINENAME'''</code>
+**The passphrase is optional.
 This will simplify your life.  From this point on, any time you SSH into (or SCP to/from etc...) the machine known as '''MACHINENAME''' while working at the machine you've done this on, you'll be automagically authenticated.
 ==Signing in to a machine==
 Pretty straightforward:
 * <code>ssh '''user@MACHINENAME'''</code>
 This will securely give you a terminal session of the remote machine.  (Much like good old telnet... But not quite so sketchily insecure.)
 ==Executing commands remotely==
 Also, pretty straightforward...
 * <code>ssh '''user@MACHINENAME "Command to be executed"'''</code>
 One thing to note...
 If you want to execute a command remotely that requires '''sudo''', you'll have to add a '''-t''' to the command line or else '''sudo''' with tell you where to go.
 * <code>ssh -t '''user@MACHINENAME "Command to be executed"'''</code>
 This is because '''sudo''' intentionally will NOT run without a local terminal session.
@@ Line 31: / Line 39: @@
 From the local machine to a remote machine:
 * <code>scp '''FileName''''''user@MACHINENAME:Destination'''</code>
 From a remote machine to the local machine:
 * <code>scp'''user@MACHINENAME:FileNameDestination'''</code>
 From a remote machine to another remote machine:
 * <code>scp'''user@MACHINENAME:FileName user@OTHERMACHINENAME:Destination'''</code>
 Starting to see a pattern?
@@ Line 43: / Line 56: @@
 ==Port forwarding (AKA Tunnelling)==
 Working on this part...
 [https://www.ssh.com/academy/ssh/tunneling/example An example]
@@ Line 77: / Line 92: @@
 when you try to ssh to a machine...
-* <code>sudo ssh-keygen -f ~/.ssh/known_hosts -R HOSTIP</code>
+*<code>sudo ssh-keygen -f ~/.ssh/known_hosts -R HOSTIP</code>
 Messages like:
@@ Line 92: / Line 107: @@
 If you see:
-* <code>Failed to add the host to the list of known hosts (/Users/USER/.ssh/known_hosts).</code>
+*<code>Failed to add the host to the list of known hosts (/Users/USER/.ssh/known_hosts).</code>
 Check permissions & ownership on that file...

← Older revision		Revision as of 17:42, 29 August 2020
Line 59:		Line 59:
	*[https://www.tecmint.com/ssh-passwordless-login-using-ssh-keygen-in-5-easy-steps/ SSH Passwordless Login Using SSH Keygen in 5 Easy Steps]		*[https://www.tecmint.com/ssh-passwordless-login-using-ssh-keygen-in-5-easy-steps/ SSH Passwordless Login Using SSH Keygen in 5 Easy Steps]
	*[https://cormachogan.com/2016/04/13/ssh-esxi-hosts-without-providing-password/ How to SSH between ESXi 6.0U2 hosts without providing a password]		*[https://cormachogan.com/2016/04/13/ssh-esxi-hosts-without-providing-password/ How to SSH between ESXi 6.0U2 hosts without providing a password]
		+	*[https://www.tecmint.com/secure-openssh-server/ How to Secure and Harden OpenSSH Server]

← Older revision		Revision as of 04:05, 22 July 2020
Line 1:		Line 1:

	[https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]		[https://www.rootusers.com/enable-ssh-linux-mint/ How To Enable SSH in Linux Mint]
		+
		+	[[Passwordless SSH]]

	===Troubleshooting===		===Troubleshooting===