Am 21.11.24 um 00:32 schrieb Harry Putnam:

On Wed, Nov 20, 2024, at 16:58, Christian Meier wrote:
Hi

I think root user is a role as it is default on OI/Solaris

# grep root /etc/user_attr
grep root /etc/user_attr
root::::type=normal;auths=solaris.*,solaris.grant;profiles=All;lock_after_retries=no;clearance=admin_high;min_label=admin_low;audit_flags=lo\:no

As long as root-user is a role login is permitted
That line above is a bit confusing.  Did you mean to say "is NOT a role"

But even if that was what you meant it appears something more is going on since 
I cannot remotely login over ssh as my user either..

Further, if it was related to the setting shown in user_attr above,  My user 
would not be able to login to root like:
     ssh root@localhost either.   And user can do that.

I'm flat  out of ideas to debug this.
Add another v to the parameters when you call ssh, eg. ssh -vvv <hostname>
With three v's you'll get more information, eg. when you don't have the
correct private key.
A problem I had in the past was that ssh tries to use every key it finds
locally but sshd allows only for a
small number of retries. So it's bad if the correct key is the 7th in
your file system but sshd allows only for five tries.


I did see something in another thread about changes in openssh that were 
causing problems... maybe this is related.
But more likely some kind of boneheadedness on my part.
Thanks for your efforts

On 20/11/2024 21:57, hput wrote:
I'm not understanding why I am unable to login remotely to IO vm via
ssh.

Far as I rememeber the only requirements to make that possible are to
add "PermitRootLogin yes" to /etc/ssh/sshd_config and restart the ssh
server.

Am I forgetting something else that is needed?

I've done these things in this order:

add PermitRootLogin yes to authentication section of /ssh/sshd_config

svcadm restart ssh

Note: Also tried svcadm disable ssh
                   svcadm enable -rst ssh

But when tried from remote host I get:

root # ssh -vv  root@oi
OpenSSH_8.9p1 Ubuntu-3ubuntu0.10, OpenSSL 3.0.2 15 Mar 2022
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug2: resolving "oi" port 22
debug1: Connecting to oi [192.168.1.220] port 22.
debug1: connect to address 192.168.1.220 port 22: Connection refused
ssh: connect to host oi port 22: Connection refused


However logged in as my user on OI I can run:

ssh root@localhost and it works as expected.

What am I missing?


_______________________________________________
openindiana-discuss mailing list
[email protected]
https://openindiana.org/mailman/listinfo/openindiana-discuss
_______________________________________________
openindiana-discuss mailing list
[email protected]
https://openindiana.org/mailman/listinfo/openindiana-discuss


_______________________________________________
openindiana-discuss mailing list
[email protected]
https://openindiana.org/mailman/listinfo/openindiana-discuss

Reply via email to