From owner-freebsd-bugs@FreeBSD.ORG Sun Oct 16 14:40:07 2011 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D7DBE1065673 for ; Sun, 16 Oct 2011 14:40:07 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id AFA1B8FC15 for ; Sun, 16 Oct 2011 14:40:07 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p9GEe7H5012916 for ; Sun, 16 Oct 2011 14:40:07 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p9GEe779012915; Sun, 16 Oct 2011 14:40:07 GMT (envelope-from gnats) Resent-Date: Sun, 16 Oct 2011 14:40:07 GMT Resent-Message-Id: <201110161440.p9GEe779012915@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, John Blazek Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A44801065724 for ; Sun, 16 Oct 2011 14:32:00 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id 938248FC15 for ; Sun, 16 Oct 2011 14:32:00 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.4/8.14.4) with ESMTP id p9GEW0up094602 for ; Sun, 16 Oct 2011 14:32:00 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.4/8.14.4/Submit) id p9GEVxRg094601; Sun, 16 Oct 2011 14:31:59 GMT (envelope-from nobody) Message-Id: <201110161431.p9GEVxRg094601@red.freebsd.org> Date: Sun, 16 Oct 2011 14:31:59 GMT From: John Blazek To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: misc/161710: SSHD starts on boot even if sshd_enable="NO" in 8.2 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Oct 2011 14:40:08 -0000 >Number: 161710 >Category: misc >Synopsis: SSHD starts on boot even if sshd_enable="NO" in 8.2 >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Oct 16 14:40:07 UTC 2011 >Closed-Date: >Last-Modified: >Originator: John Blazek >Release: 8.2-RELEASE-p4 >Organization: >Environment: [root@kahlua]:[~]# uname -a FreeBSD kahlua.logicalsolutns.com 8.2-RELEASE-p4 FreeBSD 8.2-RELEASE-p4 #7: Wed Oct 5 07:33:04 CDT 2011 root@kahlua.logicalsolutns.com:/usr/obj/usr/src/sys/KAHLUA i386 [root@kahlua]:[~]# >Description: After upgrading from 7.3 to 8.2, I found errors in my /var/log/message file indicating that inetd had a conflict. (We run inetd to handle ssh on this machine). After investigating I discovered that all of my 8.2 boxes are starting SSHD even though /etc/rc.conf has sshd_enable="NO" To diagnose the issue, I added sshd_flags="-p 9991" to rc.conf and rebooted The system booted with sshd running on port 9991 [root@kahlua]:[/usr/src]# sockstat | grep sshd root sshd 37697 3 tcp6 *:9991 *:* root sshd 37697 4 tcp4 *:9991 *:* I then ran the /usr/sbin/sshd command and sshd also started on port 2220 (which is what is set in /etc/ssh/sshd_config [root@kahlua]:[/usr/src]# /usr/sbin/sshd [root@kahlua]:[/usr/src]# sockstat | grep sshd root sshd 17757 3 tcp6 *:2220 *:* root sshd 37697 3 tcp6 *:9991 *:* root sshd 37697 4 tcp4 *:9991 *:* (Note: inetd was running tcp4 on *:2220 per /etc/rc.conf and inetd.conf) If I've done something wrong on my end, I don't know what it is. It appears that this same issue is impacting all of my 8.2 boxes. >How-To-Repeat: [root@kahlua]:[~]# cat /etc/rc.conf | grep sshd # sshd is controlleb by inetd sshd_enable="NO" sshd_flags="-p 9991" [root@kahlua]:[~]# /etc/ssh/sshd_config #Port 22 Port 2220 #Protocol 2 #AddressFamily any #ListenAddress 0.0.0.0 #ListenAddress :: ps axu | grep sshd root 37697 0.0 0.8 6712 4036 ?? Is 9:08AM 0:00.00 /usr/sbin/sshd -p 9991 >Fix: >Release-Note: >Audit-Trail: >Unformatted: