Re: sshd on F31 : strange problem with login with keys's

["George N. White III" <gnwiii@xxxxxxxxx>]

On Tue, 26 Nov 2019 at 08:36, Jouk Jansen <joukj@xxxxxxxxxxxxxxxxxxxx> wrote:

Hi All,

I'm trying to setup an ssh-server on F31 which logs a user in without a
password, but with a key-exchange. I generated all the keys and placed them
in the right locations. It still asks for the password.

Than comes the strange : I stoped the service by "systemctl stop sshd" and
did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop
and start with systemctl again made the passwordless login fail again)

Question : why does is work with just running "/usr/sbin/sshd" but not with
"systemctl start sshd" ?

When your root ran /usr/sbin/sshd was the very long list of options used

when sshd is started by systemd included?  I see:

$ sudo systemctl status sshd |fold
● sshd.service - OpenSSH server daemon
   [...]
   CGroup: /system.slice/sshd.service
           └─994 /usr/sbin/sshd -D -oCiphers=aes256-gcm@xxxxxxxxxxx,chacha20-pol
y1305@xxxxxxxxxxx,aes256-ctr,aes256-cbc,aes128-gcm@xxxxxxxxxxx,aes128-ctr,aes128
-cbc -oMACs=hmac-sha2-256-etm@xxxxxxxxxxx,hmac-sha1-etm@xxxxxxxxxxx,umac-128-etm
@openssh.com,hmac-sha2-512-etm@xxxxxxxxxxx,hmac-sha2-256,hmac-sha1,umac-128@open
ssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-gex-sha1-,gss-group14-sha1- -oKe
xAlgorithms=curve25519-sha256,curve25519-sha256@xxxxxxxxxx,ecdh-sha2-nistp256,ec
dh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-
hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha5
12,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgor
ithms=rsa-sha2-256,rsa-sha2-256-cert-v01@xxxxxxxxxxx,ecdsa-sha2-nistp256,ecdsa-s
ha2-nistp256-cert-v01@xxxxxxxxxxx,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v
01@xxxxxxxxxxx,rsa-sha2-512,rsa-sha2-512-cert-v01@xxxxxxxxxxx,ecdsa-sha2-nistp52
1,ecdsa-sha2-nistp521-cert-v01@xxxxxxxxxxx,ssh-ed25519,ssh-ed25519-cert-v01@open
ssh.com,ssh-rsa,ssh-rsa-cert-v01@xxxxxxxxxxx -oPubkeyAcceptedKeyTypes=rsa-sha2-2
56,rsa-sha2-256-cert-v01@xxxxxxxxxxx,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cer
t-v01@xxxxxxxxxxx,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@xxxxxxxxxxx,r
sa-sha2-512,rsa-sha2-512-cert-v01@xxxxxxxxxxx,ecdsa-sha2-nistp521,ecdsa-sha2-nis
tp521-cert-v01@xxxxxxxxxxx,ssh-ed25519,ssh-ed25519-cert-v01@xxxxxxxxxxx,ssh-rsa,
ssh-rsa-cert-v01@xxxxxxxxxxx -oCASignatureAlgorithms=rsa-sha2-256,ecdsa-sha2-nis
tp256,ecdsa-sha2-nistp384,rsa-sha2-512,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa

--

George N. White III

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx