Re: enabling root over ssh on F11

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Date: Sat, 12 Sep 2009 18:13:36 +0100
> From: Aaron Gray <aaronngray.lists@xxxxxxxxxxxxxx>
> Subject: Re: enabling root over ssh on F11
> To: "Community assistance, encouragement,       and advice for using
>        Fedora." <fedora-list@xxxxxxxxxx>
> Message-ID:
>        <9719867c0909121013q5f9f3a0ejf8adcb3425717708@xxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1
>
> On 12/09/2009, Todd Zullinger <tmz@xxxxxxxxx> wrote:
>> Aaron Gray wrote:
>>> I need to enable root access via sshd. I will be using certificates and
>>> firewalled access.
>>> I tried remove the suffix " user != root quiet" from /etc/pam.d/gdm.
>>
>> This only affects login via the Gnome Display Manager.
>>
>>> Also added "PermitRootLogin yes" in /etc/ssh/sshd_config.
>>
>> This is, AFAIK, the default.  It doesn't hurt having it, but it should
>> not be required.
>>
>>> Also put SELinux into Permissive mode.
>>>
>>> But still neither root sshd nor login work.
>>
>> I know that root logins via sshd work on F11, and there isn't anything
>> special required to allow it that I am aware of.  I think you should
>> post the details of the failure you are seeing.  Running ssh with -vvv
>> for more verbose output might help.  Also, check /var/log/secure on
>> the server to see if it includes any relevant information.  If you are
>> using key based authentication, you should look for lines indicating
>> that the ownership and permissions on your keys are incorrect.
>
> Its like the password is being rejected but the password works in
> 'su'. I am getting the following:-
>
> ang@Zinc ~]$ ssh -vvv root@xxxxxxxxxxxx
> OpenSSH_5.2p1, OpenSSL 0.9.8k-fips 25 Mar 2009
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to 192.168.0.16 [192.168.0.16] port 22.
> debug1: Connection established.
<--skip-->
> debug1: No more authentication methods to try.
> Permission denied (publickey,gssapi-with-mic,password).
>
> Any clues ?
>
> Aaron
>
>
>

Dumb question: are you sure ssh daemon is running on the server? Can
you login as non-root user to it?

-- 
Hiisi.
Registered Linux User #487982. Be counted at: http://counter.li.org/
--
Spandex is a privilege, not a right.
--
SIP: hiisi@xxxxxxxxx
------------------------------
pub   1024D/085B139A 2009-09-11
uid                  Hiisi (Hiisi Troll) <saippua5@xxxxxxxxx>
sub   2048g/F9138A60 2009-09-11

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux