Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Jan 2024 10:30:52 -0800
From:      Walter Parker <walterp@gmail.com>
To:        paulf@quillandmouse.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Enabling SSHD
Message-ID:  <CAMPTd_Df3vkozA9EzjTbTrp5eaqUPEHZH=Zh79WRzScy6dKwdQ@mail.gmail.com>
In-Reply-To: <20240129155758.2nnyjihsyiyxztib@yosemite.mars.lan>
References:  <20240129125745.fuh6nnc4dooto2oz@yosemite.mars.lan> <CPja5CJLsYzkPuo_qd5lnJuUj6lBBCW2uHo3NcbFubhGSKa2gNEu0ETvjZSAwI_-rQFuVvUJR2s10xbz40uL17k1lpLSCiz8azHd77S9LK8=@proton.me> <BHs6axVCDQRUWc9O5KLVIF5b9tVo_qUIXZfJ3ASj6U-6sfJKBhcSrOn_VWfYfrxOQyFSEZKLjQuHbBKJ57NuwR-jAl7kDRYp7ix7bDVgCfk=@proton.me> <20240129134722.fbwrvamdf2wx4vik@yosemite.mars.lan> <4f60fad9-c5b1-46ea-bfbf-7e654bd5d3d1@FreeBSD.org> <20240129155758.2nnyjihsyiyxztib@yosemite.mars.lan>

next in thread | previous in thread | raw e-mail | index | archive | help
--00000000000028ba13061019d96d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

For a permission denied error, check to see if the files have the correct
permission (home dir, -/.ssh, other files as used). Also check your client
to make sure it has the proper permissions.

The other way to find errors is to start sshd (from the command line) with
 -d and/or -v flags and then try to connect using your ssh client. The sshd
server will out logging as to what the errors are. It may tell you what is
causing the permission denied error.


Walter
The greatest dangers to liberty lurk in insidious encroachment by men of
zeal, well-meaning but without understanding.   -- Justice Louis D. Brandei=
s


On Mon, Jan 29, 2024 at 7:58=E2=80=AFAM Paul M Foster <paulf@quillandmouse.=
com>
wrote:

> On Mon, Jan 29, 2024 at 02:15:19PM +0000, Matthew Seaman wrote:
>
> [snip]
>
> > how to configure it.  If you want password based auth for sshd, then go
> > ahead and edit /etc/ssh/sshd_config and/or /etc/pam.d entries, as
> > appropriate.
>
> Assuming I want to login as any user on the system, hacking pam shouldn't
> be necessary, right?
>
> I've made the following changes to the stock /etc/ssh/sshd_config:
>
> PubkeyAuthentication no
> PermitRootLogin yes
> PasswordAuthentication yes
>
> And of course, restarted the daemon each time I made a change. However,
> when I try to ssh in in the following ways:
>
> ssh paulf@buckaroo
> ssh root@buckaroo
> ssh buckaroo
> ssh 192.168.254.30
>
> I get a flat "Permission denied (password,keyboard-interactive)". Not eve=
n
> an attempt to ask for a password.
>
> Clearly something's wrong, but I have no idea what. And I have googled th=
e
> problem and visitied numerous sites to no avail.
>
> Paul
>
> --
> Paul M. Foster
> Personal Blog: http://noferblatz.com
> Company Site: http://quillandmouse.com
> Software Projects: https://gitlab.com/paulmfoster
>
>

--00000000000028ba13061019d96d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">For a permission denied error, check to see if the files =
have the correct permission (home dir, -/.ssh, other files as used). Also c=
heck your client to make sure it has the proper permissions.</div><div dir=
=3D"auto"><br></div><div dir=3D"auto">The other way to find errors is to st=
art sshd (from the command line) with =C2=A0-d and/or -v flags and then try=
 to connect using your ssh client. The sshd server will out logging as to w=
hat the errors are. It may tell you what is causing the permission denied e=
rror.<br clear=3D"all"><br><br>Walter<br clear=3D"all"><div dir=3D"auto"><d=
iv dir=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_signature"=
><span style=3D"font-family:arial,sans-serif;font-size:13px;border-collapse=
:collapse;color:rgb(136,136,136)">The greatest dangers to liberty lurk in i=
nsidious encroachment by men=C2=A0of zeal, well-meaning but without underst=
anding. =C2=A0 -- Justice Louis D.=C2=A0Brandeis</span></div></div></div><d=
iv><br></div><div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"=
gmail_attr">On Mon, Jan 29, 2024 at 7:58=E2=80=AFAM Paul M Foster &lt;<a hr=
ef=3D"mailto:paulf@quillandmouse.com">paulf@quillandmouse.com</a>&gt; wrote=
:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor=
der-left:1px #ccc solid;padding-left:1ex">On Mon, Jan 29, 2024 at 02:15:19P=
M +0000, Matthew Seaman wrote:<br>
<br>
[snip]<br>
<br>
&gt; how to configure it.=C2=A0 If you want password based auth for sshd, t=
hen go<br>
&gt; ahead and edit /etc/ssh/sshd_config and/or /etc/pam.d entries, as<br>
&gt; appropriate.<br>
<br>
Assuming I want to login as any user on the system, hacking pam shouldn&#39=
;t<br>
be necessary, right?<br>
<br>
I&#39;ve made the following changes to the stock /etc/ssh/sshd_config:<br>
<br>
PubkeyAuthentication no<br>
PermitRootLogin yes<br>
PasswordAuthentication yes<br>
<br>
And of course, restarted the daemon each time I made a change. However,<br>
when I try to ssh in in the following ways:<br>
<br>
ssh paulf@buckaroo<br>
ssh root@buckaroo<br>
ssh buckaroo<br>
ssh 192.168.254.30<br>
<br>
I get a flat &quot;Permission denied (password,keyboard-interactive)&quot;.=
 Not even<br>
an attempt to ask for a password.<br>
<br>
Clearly something&#39;s wrong, but I have no idea what. And I have googled =
the<br>
problem and visitied numerous sites to no avail.<br>
<br>
Paul<br>
<br>
-- <br>
Paul M. Foster<br>
Personal Blog: <a href=3D"http://noferblatz.com" rel=3D"noreferrer" target=
=3D"_blank">http://noferblatz.com</a><br>;
Company Site: <a href=3D"http://quillandmouse.com" rel=3D"noreferrer" targe=
t=3D"_blank">http://quillandmouse.com</a><br>;
Software Projects: <a href=3D"https://gitlab.com/paulmfoster" rel=3D"norefe=
rrer" target=3D"_blank">https://gitlab.com/paulmfoster</a><br>;
<br>
</blockquote></div></div>

--00000000000028ba13061019d96d--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAMPTd_Df3vkozA9EzjTbTrp5eaqUPEHZH=Zh79WRzScy6dKwdQ>