Package: openssh-server
Version: 1:10.2p1-5
Followup-For: Bug #1129956
Dear Maintainer,
Thank you for the lighting fast reply.
Some additional information in hope you could reproduce the behaviour:
1) I can reproduce the same issue on my up-to-date laptop running also Debian
sid. Not sure how relevant it is as I may have done some similar changes in
both machines on some seemingly unrelated configs.
2) The content of my /etc/ssh/sshd_config, only non-commented and non-blank
lines (`grep -v -e '^#' -e '^$' /etc/ssh/sshd_config`)
Include /etc/ssh/sshd_config.d/*.conf
KbdInteractiveAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_* COLORTERM NO_COLOR
Subsystem sftp /usr/lib/openssh/sftp-server
3) Similarly, the content of the drop-in include option overrides file in .d/
subdirectory (`grep -v -e '^#' -e '^$' /etc/ssh/sshd_config.d/10-modify.conf`)
AddressFamily inet
PasswordAuthentication yes
UsePAM no
PermitRootLogin yes
MaxAuthTries 3
X11Forwarding no
DebianBanner no
4) systemd-related packages installed (`dpkg -l | grep systemd`):
ii dbus-user-session 1.16.2-4
amd64 simple interprocess messaging system (systemd --user
integration)
ii libpam-systemd:amd64 260~rc2-1
amd64 system and service manager - PAM module
ii libsystemd-shared:amd64 260~rc2-1
amd64 systemd shared private library
ii libsystemd0:amd64 260~rc2-1
amd64 systemd utility library
ii systemd 260~rc2-1
amd64 system and service manager
ii systemd-sysv 260~rc2-1
amd64 system and service manager - SysV compatibility
symlinks
5) Earlier I mentioned the 'broken' behaviour is as if one provides wrong
password (the password is correct though). There is one notable difference
though, when I provide
wrong password (with UsePam yes) it waits a bit (1-2 seconds) before asking for
password again. When it is 'broken' (with UsePAM no) it re-asks for new
password immediadely without any delay.
6) With `UsePAM no` it does not work no matter whether I try to login as root,
or as a normal user.
Finally, the log with LogLevel DEBUG3 you asked for. I did the test from the
same machine using ssh root@localhost (but effect is the same when trying to
login via network):
`#journalctl --unit=ssh.service --since='5 minutes ago'`
Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Stopped ssh.service - OpenBSD
Secure Shell server.
Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Starting ssh.service - OpenBSD
Secure Shell server...
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug3: already daemonized
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug3: oom_adjust_setup
Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Started ssh.service - OpenBSD
Secure Shell server.
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: Set
/proc/self/oom_score_adj from 0 to -1000
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug2: fd 6 setting
O_NONBLOCK
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: Bind to port 22 on
0.0.0.0.
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: Server listening on 0.0.0.0
port 22.
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: ssh_systemd_notify:
socket "/run/systemd/notify" notified READY=1
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug3: fd 7 is not O_NONBLOCK
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug2: fd 8 setting
O_NONBLOCK
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug1: Forked child 24376.
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug3: oom_adjust_restore
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: Set
/proc/self/oom_score_adj to 0
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: rexec start in 7 out
7 newsock 7 config_s 8/9
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: sshd-session version
OpenSSH_10.2, OpenSSL 3.5.5 27 Jan 2026
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: network
sockets: 7, 7
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: fd 7 setting
TCP_NODELAY
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug2: server_accept_loop:
child 24376 for connection from 127.0.0.1 to 127.0.0.1 received config
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: set_sock_tos:
set socket 7 IP_TOS 0xb8
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
server_process_channel_timeouts: setting 0 timeouts
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
channel_clear_timeouts: clearing
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: Connection from
127.0.0.1 port 50472 on 127.0.0.1 port 22 rdomain ""
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Local version
string SSH-2.0-OpenSSH_10.2p1
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Remote
protocol version 2.0, remote software version OpenSSH_10.2p1 Debian-5
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
compat_banner: match: OpenSSH_10.2p1 Debian-5 pat OpenSSH* compat 0x04000000
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: fd 7 setting
O_NONBLOCK
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: Network child
is on pid 24377
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: preauth child
monitor started
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 51
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
mm_answer_state: config len 3425
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 52
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_state: done
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read:
51 used once, disabling now
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: sshd-auth
version OpenSSH_10.2, OpenSSL 3.5.5 27 Jan 2026 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
server_process_channel_timeouts: setting 0 timeouts [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
channel_clear_timeouts: clearing [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: fd 5 is
O_NONBLOCK [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
ssh_sandbox_init: preparing seccomp filter sandbox [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: privsep
user:group 101:65534 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
permanently_set_uid: 101/65534 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
ssh_sandbox_child: attaching seccomp filter program [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
append_hostkey_type: ssh-rsa key not permitted by HostkeyAlgorithms [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 20 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
SSH2_MSG_KEXINIT sent [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 20 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
SSH2_MSG_KEXINIT received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: local server
KEXINIT proposal [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX
algorithms:
mlkem768x25519-sha256,sntrup761x25519-sha512,[email protected],curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-s,[email protected]
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key
algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos:
[email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc:
[email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression
ctos: none,[email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression
stoc: none,[email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages
ctos: [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages
stoc: [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
first_kex_follows 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: peer client
KEXINIT proposal [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX
algorithms:
mlkem768x25519-sha256,sntrup761x25519-sha512,[email protected],curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,[email protected]
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key
algorithms:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email protected],[email protected],rsa-sha2-512,rsa-sha2-256
[preaut
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos:
[email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc:
[email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression
ctos: none,[email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression
stoc: none,[email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages
ctos: [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages
stoc: [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
first_kex_follows 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
kex_choose_conf: will use strict KEX ordering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex:
algorithm: mlkem768x25519-sha256 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: host key
algorithm: ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex:
client->server cipher: [email protected] MAC: <implicit>
compression: none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex:
server->client cipher: [email protected] MAC: <implicit>
compression: none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: expecting
SSH2_MSG_KEX_ECDH_INIT [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 30 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
SSH2_MSG_KEX_ECDH_INIT received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_sshkey_sign: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 6 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive_expect: entering, type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 6
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_sign: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
mm_answer_sign: hostkey ssh-ed25519 index 2
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_sign: ssh-ed25519 KEX signature len=83
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 7
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read:
6 used once, disabling now
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_sshkey_sign: ssh-ed25519 signature len=83 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 31 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 21 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
ssh_packet_send2_wrapped: resetting send seqnr 3 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
ssh_set_newkeys: mode 1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: rekey out
after 134217728 blocks [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
SSH2_MSG_NEWKEYS sent [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Sending
SSH2_MSG_EXT_INFO [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: expecting
SSH2_MSG_NEWKEYS [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 21 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
ssh_packet_read_poll2: resetting read seqnr 3 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
SSH2_MSG_NEWKEYS received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
ssh_set_newkeys: mode 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: rekey in
after 134217728 blocks [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX
algorithms:
mlkem768x25519-sha256,sntrup761x25519-sha512,[email protected],curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-s,[email protected]
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key
algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos:
[email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc:
[email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc:
[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression
ctos: none,[email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression
stoc: none,[email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages
ctos: [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages
stoc: [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
first_kex_follows 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: KEX done
[preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
SSH2_MSG_EXT_INFO received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
kex_input_ext_info: extension [email protected] [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
kex_ext_info_check_ver: [email protected]=<0> [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 5 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 6 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 50 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
userauth-request for user root service ssh-connection method none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: attempt 0
failures 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_getpwnamallow: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 8 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive_expect: entering, type 9 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 8
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_pwnamallow: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
parse_server_config_depth: config reprocess config len 3425
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
parse_server_config_depth: config /etc/ssh/sshd_config.d/10-modify.conf len 648
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
auth_shadow_acctexpired: today 20518 sp_expire -1 days left -20519
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: account
expiration disabled
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 9
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read:
8 used once, disabling now
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
server_process_channel_timeouts: setting 0 timeouts [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
channel_clear_timeouts: clearing [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
input_userauth_request: setting up authctxt for root [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_inform_authserv: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 4 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1:
kex_server_update_ext_info: Sending SSH2_MSG_EXT_INFO [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2:
input_userauth_request: try method none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 51 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 4
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_authserv: service=ssh-connection, style=, role=
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read:
4 used once, disabling now
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 50 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug1:
userauth-request for user root service ssh-connection method password [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug1: attempt 1
failures 0 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug2:
input_userauth_request: try method password [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: entering [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 12 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive_expect: entering, type 13 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 12
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
auth_shadow_pwexpired: today 20518 sp_lstchg 19423 sp_max 99999
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_authpassword: sending result 0
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 13
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: Failed password for
root from 127.0.0.1 port 50472 ssh2
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: user not authenticated [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
user_specific_delay: user specific delay 1.203ms [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
ensure_minimum_time_since: elapsed 0.316ms, delaying 5.888ms (requested
6.203ms) [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3:
userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 51 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 50 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug1:
userauth-request for user root service ssh-connection method password [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug1: attempt 2
failures 1 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug2:
input_userauth_request: try method password [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: entering [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 12 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive_expect: entering, type 13 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 12
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_authpassword: sending result 0
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 13
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: Failed password for
root from 127.0.0.1 port 50472 ssh2
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: user not authenticated [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
user_specific_delay: user specific delay 1.203ms [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
ensure_minimum_time_since: elapsed 0.254ms, delaying 5.949ms (requested
6.203ms) [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3:
userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 51 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: receive
packet: type 50 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1:
userauth-request for user root service ssh-connection method password [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: attempt 3
failures 2 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug2:
input_userauth_request: try method password [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: entering [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 12 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive_expect: entering, type 13 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 12
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_authpassword: sending result 0
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 13
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: Failed password for
root from 127.0.0.1 port 50472 ssh2
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_auth_password: user not authenticated [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
user_specific_delay: user specific delay 1.203ms [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
ensure_minimum_time_since: elapsed 0.293ms, delaying 5.911ms (requested
6.203ms) [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_audit_event: entering [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_send: entering, type 112 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: error: maximum
authentication attempts exceeded for root from 127.0.0.1 port 50472 ssh2
[preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: Disconnecting
authenticating user root 127.0.0.1 port 50472: Too many authentication failures
[preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug2:
sshpkt_disconnect: sending SSH2_MSG_DISCONNECT: Too many authentication
failures [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: send packet:
type 1 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read:
checking request 112
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_answer_audit_event: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1:
monitor_read_log: child log fd closed
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3:
mm_request_receive: monitor fd closed
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: mm_reap:
child exited with status 255
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: do_cleanup
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: Killing
privsep child 24377
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: audit_event:
unhandled event 12
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug3: server_accept_loop:
child 24376 for connection from 127.0.0.1 to 127.0.0.1 closed pipe
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug1: child_close: enter
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug1: child_reap: preauth
child 24376 for connection from 127.0.0.1 to 127.0.0.1 exited after
unsuccessful auth attempt
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: srclimit_penalise: ipv4: new
127.0.0.1/32 deferred penalty of 5 seconds for penalty: failed authentication
Thank you very much!
manul
-- System Information:
Debian Release: forky/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.15+deb14-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_CA:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages openssh-server depends on:
ii debconf [debconf-2.0] 1.5.92
ii init-system-helpers 1.69
ii libaudit1 1:4.1.2-1+b1
ii libc6 2.42-13
ii libcom-err2 1.47.2-3+b8
ii libgssapi-krb5-2 1.22.1-2
ii libkrb5-3 1.22.1-2
ii libpam-modules 1.7.0-5+b1
ii libpam-runtime 1.7.0-5
ii libpam0g 1.7.0-5+b1
ii libselinux1 3.9-4+b1
ii libssl3t64 3.5.5-1
ii libwrap0 7.6.q-36+b2
ii libwtmpdb0 0.75.0-5
ii openssh-client 1:10.2p1-5
ii openssh-sftp-server 1:10.2p1-5
ii procps 2:4.0.4-9+b1
ii runit-helper 2.16.5
ii systemd [systemd-sysusers] 260~rc2-1
ii ucf 3.0052
ii zlib1g 1:1.3.dfsg+really1.3.1-3
Versions of packages openssh-server recommends:
ii libpam-systemd [logind] 260~rc2-1
pn ncurses-term <none>
ii passwd 1:4.19.3-1
ii xauth 1:1.1.2-1.1
Versions of packages openssh-server suggests:
pn molly-guard <none>
pn monkeysphere <none>
ii ssh-askpass 1:1.2.4.1-16+b1
pn ufw <none>
-- debconf information:
openssh-server/password-authentication: true
openssh-server/permit-root-login: true
