Ssh – Suppressing ssh banner from OpenSSH client

ssh

I am logging into a server which has an ssh banner set. I would like to suppress it (especially for non-interactive use). I do not have access to the server sshd_config.

The best solution I have found so far is to set the LogLevel ERROR option on the client. The problem is that this will suppress any other INFO level messages, which I don't necessarily want to hide (search the OpenSSH source for logit for examples). I could also use ssh -q but that will suppress even more.

Are there any other more specific solutions?

Best Answer

AFAIK, "ssh -q" or "LogLevel QUIET" in ~/.ssh/config are the "traditional" ways to silence the banner. So you already have a "better" compromise with "LogLevel ERROR".

A more specific solutions would be to use a custom patched version of the ssh client, if this is an option.

Related Solutions

SSH Authentication – Use Only Password and Ignore SSH Key

Try ssh -o PasswordAuthentication=yes -o PreferredAuthentications=keyboard-interactive,password -o PubkeyAuthentication=no host.example.org

In ssh v2, keyboard-interactive is another way to say "password". The -o PubkeyAuthentication=no option instructs the client not to attempt key pair authentication.

In addition, the PasswordAuthentication=yes option is to override any previously configured ssh options that may have disabled it.

Linux – How to Display SSH Banner at Login for Password Authentication Only

Yes, you can use the pam_echo plugin:

auth required pam_unix.so
auth optional pam_echo.so file=/etc/ssh/password_banner.txt

This should produce the pam_echo output after password login.

See http://www.linux-pam.org/Linux-PAM-html/sag-pam_echo.html for docs.

Edit: You'll also need to make sure you have UsePAM yes in your sshd_config. Replaced password with auth.

Best Answer

Related Solutions

SSH Authentication – Use Only Password and Ignore SSH Key

Linux – How to Display SSH Banner at Login for Password Authentication Only

Related Topic