[OpenIndiana-discuss] remote root login failing .. even after edits to sshd_config

Peter Tribble peter.tribble at gmail.com
Wed Nov 20 21:16:08 UTC 2024


On Wed, Nov 20, 2024 at 8:58 PM hput <hput3 at fastmail.fm> wrote:

> I'm not understanding why I am unable to login remotely to IO vm via
> ssh.
>
> Far as I rememeber the only requirements to make that possible are to
> add "PermitRootLogin yes" to /etc/ssh/sshd_config and restart the ssh
> server.
>
> Am I forgetting something else that is needed?
>

What does ListenAddress contain? I would guess you have a single

ListenAddress ::

which will, as of current openssh, only listen on IPv6. Comment that out
and you
should be back in business.

See:

https://openindiana.org/pipermail/openindiana-discuss/2024-October/027031.html

As an aside, I would recommend the use of "PermitRootLogin
prohibit-password" - which
happens to be the default - which enables key-based access but not
password-based.


> I've done these things in this order:
>
> add PermitRootLogin yes to authentication section of /ssh/sshd_config
>
> svcadm restart ssh
>
> Note: Also tried svcadm disable ssh
>                  svcadm enable -rst ssh
>
> But when tried from remote host I get:
>
> root # ssh -vv  root at oi
> OpenSSH_8.9p1 Ubuntu-3ubuntu0.10, OpenSSL 3.0.2 15 Mar 2022
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 21: Applying options for *
> debug2: resolving "oi" port 22
> debug1: Connecting to oi [192.168.1.220] port 22.
> debug1: connect to address 192.168.1.220 port 22: Connection refused
> ssh: connect to host oi port 22: Connection refused
>
>
> However logged in as my user on OI I can run:
>
> ssh root at localhost and it works as expected.
>
> What am I missing?
>
>
> _______________________________________________
> openindiana-discuss mailing list
> openindiana-discuss at openindiana.org
> https://openindiana.org/mailman/listinfo/openindiana-discuss
>


-- 
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/


More information about the openindiana-discuss mailing list