[OpenIndiana-discuss] remote root login failing .. even after edits to sshd_config

[Harry Putnam]

On Wed, Nov 20, 2024, at 16:58, Christian Meier wrote:
> Hi
>
> I think root user is a role as it is default on OI/Solaris
>
> # grep root /etc/user_attr

grep root /etc/user_attr
root::::type=normal;auths=solaris.*,solaris.grant;profiles=All;lock_after_retries=no;clearance=admin_high;min_label=admin_low;audit_flags=lo\:no

> As long as root-user is a role login is permitted

That line above is a bit confusing.  Did you mean to say "is NOT a role"  

But even if that was what you meant it appears something more is going on since I cannot remotely login over ssh as my user either..

Further, if it was related to the setting shown in user_attr above,  My user would not be able to login to root like:
    ssh root at localhost either.   And user can do that.

I'm flat  out of ideas to debug this.  
I did see something in another thread about changes in openssh that were causing problems... maybe this is related.
But more likely some kind of boneheadedness on my part.
Thanks for your efforts

> On 20/11/2024 21:57, hput wrote:
>> I'm not understanding why I am unable to login remotely to IO vm via
>> ssh.
>>
>> Far as I rememeber the only requirements to make that possible are to
>> add "PermitRootLogin yes" to /etc/ssh/sshd_config and restart the ssh
>> server.
>>
>> Am I forgetting something else that is needed?
>>
>> I've done these things in this order:
>>
>> add PermitRootLogin yes to authentication section of /ssh/sshd_config
>>
>> svcadm restart ssh
>>
>> Note: Also tried svcadm disable ssh
>>                   svcadm enable -rst ssh
>>
>> But when tried from remote host I get:
>>
>> root # ssh -vv  root at oi
>> OpenSSH_8.9p1 Ubuntu-3ubuntu0.10, OpenSSL 3.0.2 15 Mar 2022
>> debug1: Reading configuration data /etc/ssh/ssh_config
>> debug1: /etc/ssh/ssh_config line 21: Applying options for *
>> debug2: resolving "oi" port 22
>> debug1: Connecting to oi [192.168.1.220] port 22.
>> debug1: connect to address 192.168.1.220 port 22: Connection refused
>> ssh: connect to host oi port 22: Connection refused
>>
>>
>> However logged in as my user on OI I can run:
>>
>> ssh root at localhost and it works as expected.
>>
>> What am I missing?
>>
>>
>> _______________________________________________
>> openindiana-discuss mailing list
>> openindiana-discuss at openindiana.org
>> https://openindiana.org/mailman/listinfo/openindiana-discuss