[Bug 2920] New: Centos7.4, openssh 7.4p1 upgrade openssh 7.8p1, sshd service restart failed

Fri Oct 19 22:28:47 AEDT 2018

https://bugzilla.mindrot.org/show_bug.cgi?id=2920

            Bug ID: 2920
           Summary: Centos7.4, openssh 7.4p1 upgrade openssh 7.8p1, sshd
                    service restart failed
           Product: Portable OpenSSH
           Version: 7.4p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: security
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: 865722371 at qq.com

Centos7.4, openssh 7.4p1 upgrade openssh 7.8p1, sshd service restart
failed.

Please help me solve the problem, thank you.

prompt：

[root at xtjg-centos74 ~]# service sshd start
Starting sshd (via systemctl):  Job for sshd.service failed because a
timeout was exceeded. See "systemctl status sshd.service" and
"journalctl -xe" for details.
[失败]
[root at xtjg-centos74 ~]# systemctl status sshd.service
● sshd.service - OpenSSH server daemon
   Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled;
vendor preset: enabled)
   Active: activating (auto-restart) (Result: timeout) since 五
2018-10-19 19:25:57 CST; 17s ago
     Docs: man:sshd(8)
           man:sshd_config(5)
  Process: 2182 ExecStart=/usr/sbin/sshd -D $OPTIONS (code=exited,
status=0/SUCCESS)
 Main PID: 2182 (code=exited, status=0/SUCCESS)
    Tasks: 7
   CGroup: /system.slice/sshd.service
           ├─1743 sshd: root at pts/0
           ├─1745 -bash
           ├─1815 sshd: root at pts/1
           ├─1817 -bash
           ├─2138 sshd: root at notty
           ├─2140 /usr/libexec/sftp-server
           └─2199 systemctl status sshd.service

10月 19 19:25:57 xtjg-centos74 systemd[1]: Failed to start OpenSSH
server daemon.
10月 19 19:25:57 xtjg-centos74 systemd[1]: Unit sshd.service entered
failed state.
10月 19 19:25:57 xtjg-centos74 systemd[1]: sshd.service failed.
[root at xtjg-centos74 ~]# journalctl -xe
10月 19 19:23:44 xtjg-centos74 systemd[1]: sshd.service start operation
timed out. Terminating.
10月 19 19:23:44 xtjg-centos74 sshd[2129]: Received signal 15;
terminating.
10月 19 19:23:44 xtjg-centos74 systemd[1]: Failed to start OpenSSH
server daemon.
-- Subject: Unit sshd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit sshd.service has failed.
-- 
-- The result is failed.
10月 19 19:23:44 xtjg-centos74 systemd[1]: Unit sshd.service entered
failed state.
10月 19 19:23:44 xtjg-centos74 systemd[1]: sshd.service failed.
10月 19 19:23:44 xtjg-centos74 polkitd[785]: Unregistered Authentication
Agent for unix-process:2163:163415 (system bus name :1.66, objec
10月 19 19:24:27 xtjg-centos74 systemd[1]: sshd.service holdoff time
over, scheduling restart.
10月 19 19:24:27 xtjg-centos74 systemd[1]: Starting OpenSSH server
daemon...
-- Subject: Unit sshd.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit sshd.service has begun starting up.
10月 19 19:24:27 xtjg-centos74 sshd[2182]: Server listening on 0.0.0.0
port 22.
10月 19 19:24:27 xtjg-centos74 sshd[2182]: Server listening on :: port
22.
10月 19 19:25:57 xtjg-centos74 systemd[1]: sshd.service start operation
timed out. Terminating.
10月 19 19:25:57 xtjg-centos74 sshd[2182]: Received signal 15;
terminating.
10月 19 19:25:57 xtjg-centos74 systemd[1]: Failed to start OpenSSH
server daemon.
-- Subject: Unit sshd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit sshd.service has failed.
-- 
-- The result is failed.
10月 19 19:25:57 xtjg-centos74 systemd[1]: Unit sshd.service entered
failed state.
10月 19 19:25:57 xtjg-centos74 systemd[1]: sshd.service failed.
[root at xtjg-centos74 ~]# sshd -T
port 22
addressfamily any
listenaddress [::]:22
listenaddress 0.0.0.0:22
logingracetime 120
x11displayoffset 10
maxauthtries 6
maxsessions 10
clientaliveinterval 0
clientalivecountmax 3
streamlocalbindmask 0177
permitrootlogin yes
ignorerhosts yes
ignoreuserknownhosts no
hostbasedauthentication no
hostbasedusesnamefrompacketonly no
pubkeyauthentication yes
passwordauthentication yes
kbdinteractiveauthentication yes
challengeresponseauthentication yes
printmotd yes
printlastlog yes
x11forwarding no
x11uselocalhost yes
permittty yes
permituserrc yes
strictmodes yes
tcpkeepalive yes
permitemptypasswords no
compression yes
gatewayports no
usedns no
allowtcpforwarding yes
allowagentforwarding yes
disableforwarding no
allowstreamlocalforwarding yes
streamlocalbindunlink no
fingerprinthash SHA256
exposeauthinfo no
pidfile /var/run/sshd.pid
xauthlocation /usr/bin/xauth
ciphers
chacha20-poly1305 at openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm at openssh.com,aes256-gcm at openssh.com
macs
umac-64-etm at openssh.com,umac-128-etm at openssh.com,hmac-sha2-256-etm at openssh.com,hmac-sha2-512-etm at openssh.com,hmac-sha1-etm at openssh.com,umac-64 at openssh.com,umac-128 at openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
banner none
forcecommand none
chrootdirectory none
trustedusercakeys none
revokedkeys none
authorizedprincipalsfile none
versionaddendum none
authorizedkeyscommand none
authorizedkeyscommanduser none
authorizedprincipalscommand none
authorizedprincipalscommanduser none
hostkeyagent none
kexalgorithms
curve25519-sha256,curve25519-sha256 at libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
hostbasedacceptedkeytypes
ecdsa-sha2-nistp256-cert-v01 at openssh.com,ecdsa-sha2-nistp384-cert-v01 at openssh.com,ecdsa-sha2-nistp521-cert-v01 at openssh.com,ssh-ed25519-cert-v01 at openssh.com,rsa-sha2-512-cert-v01 at openssh.com,rsa-sha2-256-cert-v01 at openssh.com,ssh-rsa-cert-v01 at openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
hostkeyalgorithms
ecdsa-sha2-nistp256-cert-v01 at openssh.com,ecdsa-sha2-nistp384-cert-v01 at openssh.com,ecdsa-sha2-nistp521-cert-v01 at openssh.com,ssh-ed25519-cert-v01 at openssh.com,rsa-sha2-512-cert-v01 at openssh.com,rsa-sha2-256-cert-v01 at openssh.com,ssh-rsa-cert-v01 at openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
pubkeyacceptedkeytypes
ecdsa-sha2-nistp256-cert-v01 at openssh.com,ecdsa-sha2-nistp384-cert-v01 at openssh.com,ecdsa-sha2-nistp521-cert-v01 at openssh.com,ssh-ed25519-cert-v01 at openssh.com,rsa-sha2-512-cert-v01 at openssh.com,rsa-sha2-256-cert-v01 at openssh.com,ssh-rsa-cert-v01 at openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
rdomain none
loglevel INFO
syslogfacility AUTH
authorizedkeysfile .ssh/authorized_keys
hostkey /etc/ssh/ssh_host_rsa_key
hostkey /etc/ssh/ssh_host_ecdsa_key
hostkey /etc/ssh/ssh_host_ed25519_key
authenticationmethods any
subsystem sftp /usr/libexec/sftp-server
maxstartups 10:30:100
permittunnel no
ipqos af21 cs1
rekeylimit 0 0
permitopen any
permitlisten any
permituserenvironment no
[root at xtjg-centos74 ~]#

-- 
You are receiving this mail because:
You are watching the assignee of the bug.