On Fri, Feb 14, 2014 at 02:17:24PM +0100, Tom Kuther wrote: > Am 14.02.2014 13:42, schrieb Stephan Sachse: > > set LogLevel to DEBUG3. keyexchange is down. put then hangs for some > > time und sshd dies > > > > sshd[269]: debug1: KEX done [preauth] > > sshd[269]: debug1: userauth-request for user root service > > ssh-connection method none [preauth] > > sshd[269]: debug1: attempt 0 failures 0 [preauth] > > sshd[269]: debug3: mm_getpwnamallow entering [preauth] > > sshd[269]: debug3: mm_request_send entering: type 8 [preauth] > > sshd[269]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth] > > sshd[269]: debug3: mm_request_receive_expect entering: type 9 [preauth] > > sshd[269]: debug3: mm_request_receive entering [preauth] > > sshd[269]: debug3: mm_request_receive entering > > sshd[269]: debug3: monitor_read: checking request 8 > > sshd[269]: debug3: mm_answer_pwnamallow > > sshd[269]: debug3: Trying to reverse map address 10.1.25.151. > > systemd[1]: Received SIGCHLD from PID 270 (sshd). > > systemd[1]: Got SIGCHLD for process 270 (sshd) > > systemd[1]: Child 270 died (code=killed, status=15/TERM) > > > >> Also keep in mind that running a compete distro within LXC + user namespaces requires > >> some changes. Like disabling pam_loginuid.so in pam. > >> For systemd distros you have to remove OOMScoreAdjust= and CapabilityBoundingSet= from all units... > > > > yes, i know. i have no errors from systemd, all looks fine with "exec > > /sbin/init systemd.log_level=debug" > > > > /stephan > > > > I have the same problem on a slightly different setup. Both host and > guest are Archlinux with systemd-208, libvirt-git with the chown() patches. > > LXC Console login works fine (and I do not have such issues with messed > up console), but login via SSH fails with the exact same symptoms. Most likely is the pam_loginuid module denying access. Sadly I find debugging PAM a complete pain - if anyone knows how to make it spew logs for each module executed and then accept/reject state, that'd be awesome for troubleshooting this. Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :| -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list