Date: Mon, 28 Nov 2016 17:49:24 +0900 From: KIRIYAMA Kazuhiko <kiri@kx.openedu.org> To: Allan Jude <allanjude@freebsd.org> Cc: freebsd-current@freebsd.org Subject: Re: fatal: Fssh_packet_write_poll: Connection from xxx.xxx.xx.xx port yyyyy: Permission denied Message-ID: <201611280849.uAS8nO6p020945@kx.openedu.org> In-Reply-To: <201611230824.uAN8OWbR096300@kx.openedu.org> References: <201611220737.uAM7bMSY072062@kx.openedu.org> <2b9b6473-fc17-3aad-ee1a-4c20b340ec00@freebsd.org> <201611230824.uAN8OWbR096300@kx.openedu.org>
next in thread | previous in thread | raw e-mail | index | archive | help
At Wed, 23 Nov 2016 17:24:32 +0900,
my wrote:
>
> At Tue, 22 Nov 2016 10:47:17 -0500,
> Allan Jude wrote:
> >
> > [1 Re: fatal: Fssh_packet_write_poll: Connection from xxx.xxx.xx.xx port yyyyy: Permission denied <multipart/mixed (7bit)>]
> > [1.1 <text/plain; windows-1252 (quoted-printable)>]
> > On 2016-11-22 02:37, KIRIYAMA Kazuhiko wrote:
> > > Hi, all
> > >
> > > I've updated to HEAD(r308871) at 2 days ago, and also ports
> > > too(r426562). Then all stuffs including applications have
> > > been updated and tried to slogin to this host,but can't
> > > connect with the message `userauth_pubkey: key type ssh-dss
> > > not in PubkeyAcceptedKeyTypes [preauth]' in
> > > /var/log/auth.log. I found new OpenSSH-7.* has not been
> > > supported DSA and to connect from client with old ssh(lower
> > > than OpenSSH-7.0),set `ssh-dss' or some values set to
> > > relevant variables in /etc/ssh/sshd_config. According to [1]
> > > and [2] I've set these variables as below:
> > >
> > > PubkeyAcceptedKeyTypes=+ssh-dss
> > > HostKeyAlgorithms=+ssh-dss
> > > KexAlgorithms=+diffie-hellman-group-exchange-sha256
> > >
> > > and successfully slogined:
> > >
> >
> > snip
> >
> > >
> > > And with the message `fatal: Fssh_packet_write_poll:
> > > Connection from xxx.xxx.xx.xx port yyyyy: Permission denied'
> > > in /var/log/auth.log:
I've tried to between *same* version(r308871) with
RSA,but failed to the same message:
admin@kx:~ % scp /jails/backup/hosts/201606020717/vm/wrk/* bhy:/vm/images
freebsd-10r.img 0% 0 0.0KB/s --:-- ETAFssh_packet_write_poll: Connection to xxx.xxx.xx.xx port yyyyy: Permission denied
lost connection
admin@kx:~ %
I found whole filesystem looks like set NFSv4 ACLs. Is this
right?
admin@kx:~ % getfacl /
# file: /
# owner: root
# group: wheel
owner@:rwxp--aARWcCos:-------:allow
group@:r-x---a-R-c--s:-------:allow
everyone@:r-x---a-R-c--s:-------:allow
admin@kx:~ % getfacl /tmp
# file: /tmp
# owner: root
# group: wheel
owner@:rwxp--aARWcCos:-------:allow
group@:rwxp--a-R-c--s:-------:allow
everyone@:rwxp--a-R-c--s:-------:allow
admin@kx:~ % getfacl /var/tmp
# file: /var/tmp
# owner: root
# group: wheel
owner@:rwxp--aARWcCos:-------:allow
group@:rwxp--a-R-c--s:-------:allow
everyone@:rwxp--a-R-c--s:-------:allow
admin@kx:~ %
---
KIRIYAMA Kazuhiko
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201611280849.uAS8nO6p020945>