only root without password

Ben Lindstrom mouring at eviladmin.org
Sat Dec 20 11:28:59 EST 2008


You need to actually show us the connection.  Not that you started  
sshd.  Plus you may need to run it on an alternate port (assuming you  
are not going to down the original deamon).  e.g.  sshd -ddd -p 35    
then on the client side to ssh -p 35 machine.

- Ben

On Dec 19, 2008, at 2:24 PM, Fede Rico wrote:

> The sshd -ddd output
>
> debug2: load_server_config: filename /etc/ssh/sshd_config
> debug2: load_server_config: done config len = 321
> debug2: parse_server_config: config /etc/ssh/sshd_config len 321
> debug1: sshd version OpenSSH_3.9p1
> debug1: private host key: #0 type 0 RSA1
> debug3: Not a RSA1 key file /etc/ssh/ssh_host_rsa_key.
> debug1: read PEM private key done: type RSA
> debug1: private host key: #1 type 1 RSA
> debug3: Not a RSA1 key file /etc/ssh/ssh_host_dsa_key.
> debug1: read PEM private key done: type DSA
> debug1: private host key: #2 type 2 DSA
> debug1: rexec_argv[0]='/usr/sbin/sshd'
> debug1: rexec_argv[1]='-D'
> debug1: rexec_argv[2]='-ddd'
> debug1: rexec_argv[3]='-p'
> debug1: rexec_argv[4]='3333'
> debug2: fd 3 setting O_NONBLOCK
> debug1: Bind to port 3333 on ::.
> Server listening on :: port 3333.
> debug2: fd 4 setting O_NONBLOCK
> debug1: Bind to port 3333 on 0.0.0.0.
> Bind to port 3333 on 0.0.0.0 failed: Address already in use.
> Generating 768 bit RSA key.
> RSA key generation complete.
> debug3: fd 4 is not O_NONBLOCK
> debug1: Server will not fork when running in debugging mode.
> debug3: send_rexec_state: entering fd = 7 config len 321
> debug3: ssh_msg_send: type 0
> debug3: send_rexec_state: done
> debug1: rexec start in 4 out 4 newsock 4 pipe -1 sock 7
>
>
>
> --- Ven 19/12/08, Bob Proulx <bob at proulx.com> ha scritto:
>
>> Da: Bob Proulx <bob at proulx.com>
>> Oggetto: Re: only root without password
>> A: "Fede Rico" <fede_home at yahoo.it>
>> Cc: openssh-unix-dev at mindrot.org
>> Data: Venerdì 19 dicembre 2008, 18:18
>> Fede Rico wrote:
>>> this is the .ssh permission:
>>>
>>> .ssh
>>> 4,0K drwx------ 2 oracle oinstall 4,0K 2008-12-04
>> 22:44 .ssh
>>>
>>> .ssh/
>>> 4,0K -rw-r--r-- 1 oracle oinstall  859 2008-12-04
>> 22:44 authorized_keys
>>> 4,0K -rw------- 1 oracle oinstall 1,7K 2008-12-04
>> 22:39 id_rsa
>>> 4,0K -rw-r--r-- 1 oracle oinstall  403 2008-12-04
>> 22:39 id_rsa.pub
>>> 4,0K -rw-r--r-- 1 oracle oinstall 1,5K 2008-12-17
>> 19:07 known_hosts
>>
>> You did not show the permissions on the home directory.
>> Those are
>> also considered and are often the source of problems.
>>
>>  chmod go-w $HOME
>>
>>> The ssh works without the password for the
>> "root" user, any other user
>>> cannot use the key and ssh ask me for the password !!
>>
>> It is possible that root has an ssh-agent and the ssh-agent
>> has an
>> authorized key loaded but the non-root user does not?  That
>> could give
>> the appearance of what you describe.
>>
>>  ssh-add -l
>>  ssh-add -L
>>
>> Bob
>
>
>
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev



More information about the openssh-unix-dev mailing list