Enable Remote Login to Start SSH Server in Mac OS X

Remote Login is a feature in Mac OS X’s Sharing preferences that allow remote users to connect to a Mac in a secure fashion by using the OpenSSH protocols. Essentially, it starts an SSH server on a Mac, which includes the ability to accept incoming SSH connections, which is the secure replacement for telnet. Additionally, it includes and enables the SFTP server, which is the secure replacement for FTP, and finally it also enables SCP, for secure remote copying. If this sounds complicated or confusing, it’s really not, and we’ll walk through exactly how to quickly enable and set up the SSH server.

The inclusion of SFTP through Remote Login also explains why Apple ditched the FTP server in Lion onward (this remains the same in Mountain Lion+), as they opted for the infinitely more secure SFTP option and bundled it within Sharing’s “Remote Login” option as part of the entire SSH package.

Using Remote Login to Start the SSH Server in Mac OS X

These instructions are the same for OS X 10.8 Mountain Lion, 10.7, Lion and 10.6:

• Open System Preferences and click on “Sharing”
• Select the checkbox next to “Remote Login” to enable it, like the screenshot above

If you want to limit incoming SSH access to certain users, you can do so in the same preference panel by ticking “Only these users” and then manually adding them by clicking on the + icon. This brings up a list of Users & Groups on the Mac that you can select from. Think of this as an extra security step, although SSH by default is quite secure as is due to the nature of the protocol.

Now that the SSH server has been enabled, you can verify they have enabled if you’d like. The easiest way to do this is to visit Terminal app and type either ‘ssh localhost’ or ‘sftp localhost’, which, if all is running as intended, should return something like this:

$ sftp localhost
The authenticity of host 'localhost (::1)' can't be established.
RSA key fingerprint is b3:42:27:4a:b6:22:86:4b:c6:21:32:47:4b:8b:18:0d.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (RSA) to the list of known hosts.
Password:

Connecting to localhost isn’t too useful though, and this is called Remote Login for a reason, because it allows for secured connections to remote Macs through either the SSH command line interface, SFTP through any modern FTP/SFTP client, or with a direct file transfer by using the scp command from the terminal of other Macs or unix machines. We’ll focus primarily on the SSH and SFTP side of things because that is generally what the most commonly needed.

Connecting to the Mac’s SSH Server Remotely

Now that you have SSH up and running, connecting to it remotely is easy. The great thing about this is you can now connect to the Mac from virtually any other operating system, all you need is an SSH client. SSH clients are bundled with Mac OS X and Linux so there are no downloads necessary there, but iOS users can use Prompt and Windows users can get PuTTY (its free).

1) From the Mac functioning as an SSH Server:

First you’ll want to grab the IP of the Mac running the server, this let’s another user/client know where to connect to:

• Get the Macs IP address – Go to “System Preferences” and “Network” to retrieve the IP

2) Connecting to the Mac with SSH from another computer:

Now with servers IP address, the Mac can be connected to:

• We’ll assume you’re using the Terminal in Mac OS X, so using the IP address that you just found, use the following command syntax:

ssh username@ip.address

• This is what it would actually look like, using paul as the username and 192.168.0.25 as the server IP:

ssh paul@192.168.0.25

• You will be asked to accept an RSA key to your known hosts list, so type “yes” and then you will be asked for the users password
• You’re now remotely connected to the Mac via SSH

If you want to use SFTP or SCP instead, the procedure is the same except you use ‘sftp’ or ‘scp’ as the commands instead. Additionally, you can use SFTP from apps like CyberDuck, Transmit, or from Mac OS X itself to transfer files to and from the Mac from any other location. A direct SFTP service link would look something like this: sftp://192.168.0.100

A few things to remember here: your local IP address (on a LAN) is different than your external IP address (to the outside world). The easiest way to get a machines external IP is by going to a site like ‘whatismyip.org’ but keep in mind that if the Mac is behind a router with a firewall, you would have to open the ports on the router to be able to access it. That process is different depending on the router and firewall in use, so it wouldn’t make much sense to cover it here.

Finally, if you don’t mind the whole jailbrake thing, you can actually SSH into iPhones and iPads too by setting up servers on iOS devices, but it’s a bit more complicated.

Thanks to Izdexic for the post idea via comments