Tag Info

Hot answers tagged


My work-colleague pointed me to the same direction as /u/meuh did, using a slightly different approach. Match Address "172.24.*.33" PermitRootLogin yes Match Address "," PermitRootLogin yes


Normally sshd does allow either public key authentication, password authentication and the others you have enabled. From your output you can see that GSSAPI is tried first, but that did not succeed. Next the public keys are offered but they were not accepted and finally the password authentication asks you for a password. If you enter a wrong password (or ...


Depending on your version of ssh, you might be able to set a match condition around your AllowUsers. man sshd_config lists the allowed commands under Match. If AllowUsers is in there, you might try the following.Make sure it is at the end of the file. Match User root AllowUsers root@ a.b.c.d root@q.r.s.t Eg, not in OpenSSH_6.0p1 Debian, but ok in ...


ssh-agent -k then the passphrase was entered again and solved problem


/me wished he could comment sshd needs to (typically, but though you didn't specifiy the exact use case(s) etc.) allocate a pty per login, however, in your case, ssh "echo hi; sleep 100s" does NOT allocate a pty, so no need for the kernel.pty.max setting... unless you want thousands of users loggedin*... to test that, you'll need to add the -t option to ...


recovery is similar to a lost root password (and might be easiest). connect to the console of your VM, using virtual box. 2.a. if you can log from there, log as user, then sudo root, then edit sshd (and firewall rules) and reboot. 2.b. if you can't log, neither root/nor user, reboot hosts, upon boot, select kernel (using arrows), edit (using e), then ...


You have to reorder the iptables rules. You can't connect to your sshd because the rules are checked in line for line. And you already told iptables -A INPUT -p tcp -j REJECT --reject-with tcp-reset = reject ALL tcp traffic. Even you later tell him to accept connections to port 5000 it doesn't matter - you already rejected those connections. So when you ...

Only top voted, non community-wiki answers of a minimum length are eligible