Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Jan 2024 11:33:02 -0800
From:      Jim Long <freebsd-questions@umpquanet.com>
To:        Paul M Foster <paulf@quillandmouse.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Enabling SSHD
Message-ID:  <Zbf9btUvMk01yodg@sfo.umpquanet.com>
In-Reply-To: <20240129155758.2nnyjihsyiyxztib@yosemite.mars.lan>
References:  <20240129125745.fuh6nnc4dooto2oz@yosemite.mars.lan> <CPja5CJLsYzkPuo_qd5lnJuUj6lBBCW2uHo3NcbFubhGSKa2gNEu0ETvjZSAwI_-rQFuVvUJR2s10xbz40uL17k1lpLSCiz8azHd77S9LK8=@proton.me> <BHs6axVCDQRUWc9O5KLVIF5b9tVo_qUIXZfJ3ASj6U-6sfJKBhcSrOn_VWfYfrxOQyFSEZKLjQuHbBKJ57NuwR-jAl7kDRYp7ix7bDVgCfk=@proton.me> <20240129134722.fbwrvamdf2wx4vik@yosemite.mars.lan> <4f60fad9-c5b1-46ea-bfbf-7e654bd5d3d1@FreeBSD.org> <20240129155758.2nnyjihsyiyxztib@yosemite.mars.lan>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jan 29, 2024 at 10:57:58AM -0500, Paul M Foster wrote: 
>
> Assuming I want to login as any user on the system, hacking pam
> shouldn't be necessary, right?

Correct.

> I've made the following changes to the stock /etc/ssh/sshd_config:
> 
> PubkeyAuthentication no
> PermitRootLogin yes
> PasswordAuthentication yes

Comment out the first line, and the third line.  So then you'll have only one
change to the stock file, namely:

PermitRootLogin yes

Just to ensure there aren't any mistaken assumptions, please confirm
by replying with the output of:

# grep '^[^#]' /etc/ssh/sshd_config 

You should see:

PermitRootLogin yes
AuthorizedKeysFile      .ssh/authorized_keys
Subsystem       sftp    /usr/libexec/sftp-server

and nothing else.  If that's so, then restart the sshd service:

# service sshd restart

and re-try your logins.  

You may also find clues in /var/log/auth.log on the sshd server side.

Good luck!

Jim


> And of course, restarted the daemon each time I made a change. However,
> when I try to ssh in in the following ways:
> 
> ssh paulf@buckaroo
> ssh root@buckaroo
> ssh buckaroo
> ssh 192.168.254.30
> 
> I get a flat "Permission denied (password,keyboard-interactive)". Not even
> an attempt to ask for a password.
> 
> Clearly something's wrong, but I have no idea what. And I have googled the
> problem and visitied numerous sites to no avail.
> 
> Paul
> 
> -- 
> Paul M. Foster
> Personal Blog: http://noferblatz.com
> Company Site: http://quillandmouse.com
> Software Projects: https://gitlab.com/paulmfoster



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Zbf9btUvMk01yodg>