Re: [SOLVED] SSH after upgrade

2019-10-07 Thread Earl A Ramirez
>
> Please, do not advise this as a general solution. The correct solution
> is to setup public key authentication or use different user
>
Isn't cockpit installed by default on servers since that is the future
directive?

>
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: [SOLVED] SSH after upgrade

2019-10-07 Thread Jakub Jelen
On Sun, 2019-10-06 at 11:15 -0500, Mike Chambers wrote:
> On Sun, 2019-10-06 at 18:05 +0200, alcir...@gmail.com wrote:
> > On Sun, 2019-10-06 at 10:46 -0500, Mike Chambers wrote:
> > > Upgraded server from Fedora 30 to 31 (updated to present), and
> > > ssh
> > > into
> > > that server works fine as normal user, but no longer lets me
> > > login
> > > as
> > > root.  I can login as root from the server machine itself, and
> > > can
> > > login via su - but just cant' from ssh.
> > > 
> > > Any ideas what changed or got replaced so revert it back?
> > 
> > It could it be related to this change: 
> > https://fedoraproject.org/wiki/Releases/31/ChangeSet#Disable_Root_Password_Login_in_SSH
> 
> Had to add the below line to my sshd.conf file and works now.
> 
> PermitRootLogin yes
> 
> Guess it changed or got removed when I did the upgrade (upgraded via
> dnf, not a clean install), but added that line and it works now.

No, this IS intentional change of Fedora 31 to disable password root
logins. This account is very frequent target of brute-force attacks
(and this change was made by upstream OpenSSH years ago).

Please, do not advise this as a general solution. The correct solution
is to setup public key authentication or use different user and sudo
for the administrative tasks.

Regards,
-- 
Jakub Jelen
Senior Software Engineer
Security Technologies
Red Hat, Inc.
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org


Re: [SOLVED] SSH after upgrade

2019-10-06 Thread Mike Chambers
On Sun, 2019-10-06 at 18:05 +0200, alcir...@gmail.com wrote:
> On Sun, 2019-10-06 at 10:46 -0500, Mike Chambers wrote:
> > Upgraded server from Fedora 30 to 31 (updated to present), and ssh
> > into
> > that server works fine as normal user, but no longer lets me login
> > as
> > root.  I can login as root from the server machine itself, and can
> > login via su - but just cant' from ssh.
> > 
> > Any ideas what changed or got replaced so revert it back?
> 
> It could it be related to this change: 
> https://fedoraproject.org/wiki/Releases/31/ChangeSet#Disable_Root_Password_Login_in_SSH

Had to add the below line to my sshd.conf file and works now.

PermitRootLogin yes

Guess it changed or got removed when I did the upgrade (upgraded via
dnf, not a clean install), but added that line and it works now.

Thanks,
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org