Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

ssh not accepting password ( solaris 10 )

857 views
Skip to first unread message

george2

unread,
Jul 31, 2009, 6:32:18 AM7/31/09
to
When testing ssh by sshing to localhost normally the prompt is like below :
root@localhost's password:

We a problem server which is not accepting the users password. I have
verified the password, but when sshing to localhost and from another server
the password is rejected :

# ssh localhost
Password Authentication
Password:

I just keeps giving me the password prompt .
Also the /etc/issue which is specified in sshd_config as the Banner is not
being displayed.
On all of our servers this is normally displayed. I have looked at the
sshd_config and can see no problem. Root access is allowed , password
authentication is enabled etc

PermitRootLogin yes
Banner /etc/issue

George


clau...@hotmail.com

unread,
Jul 31, 2009, 7:10:50 AM7/31/09
to

Does su - user work?

george2

unread,
Jul 31, 2009, 7:21:49 AM7/31/09
to

"claus...@googlemail.com" <clau...@hotmail.com> wrote in message
news:81bda90c-ad19-40fc...@v20g2000yqm.googlegroups.com...
Yes, but even stranger is that i`ve done a svcadm disable on ssh , and the
sshd process disappears from the process table , and I still get the same
prompt when i ssh to localhost. very strange.


Chris Ridd

unread,
Jul 31, 2009, 8:34:27 AM7/31/09
to
On 2009-07-31 12:21:49 +0100, "george2" <geo...@twig.tk> said:

> Yes, but even stranger is that i`ve done a svcadm disable on ssh , and the
> sshd process disappears from the process table , and I still get the same
> prompt when i ssh to localhost. very strange.

Has someone added sshd to inetd?
--
Chris

george2

unread,
Jul 31, 2009, 8:39:37 AM7/31/09
to

"Chris Ridd" <chri...@mac.com> wrote in message
news:7dg6mjF...@mid.individual.net...
Nope, nothing in inetd.conf
G


george2

unread,
Jul 31, 2009, 10:51:22 AM7/31/09
to
I belileve the customer has installed something called : Tumbleweed Secure
Transport


Chris Ridd

unread,
Jul 31, 2009, 10:52:09 AM7/31/09
to

Solaris 10 doesn't use inetd.conf any more. Try using inetadm.

--
Chris

hume.sp...@bofh.ca

unread,
Jul 31, 2009, 10:54:39 AM7/31/09
to
george2 <geo...@twig.tk> wrote:
> Nope, nothing in inetd.conf

Perhaps someone did something stupid with DNS or /etc/hosts?

What does "ping -sn localhost" get you?

--
Brandon Hume - hume -> BOFH.Ca, http://WWW.BOFH.Ca/

Michael Weis

unread,
Aug 2, 2009, 4:14:59 AM8/2/09
to

>> Has someone added sshd to inetd?

> Nope, nothing in inetd.conf


Just for info, inetd.conf is not longer used in Solaris 10. Means it can
be used for defining new inetd services, which then can be imported as
SMF service with inetd as Delegated restarter.

Michael

Canuck57

unread,
Aug 2, 2009, 12:21:08 PM8/2/09
to

"george2" <geo...@twig.tk> wrote in message
news:IJGdnavlzaKvVe_X...@brightview.co.uk...

Two reasons why.

First, edit two files. /etc/ssh/sshd_config and allow root. Next, edit
/etc/default/login and comment out the CONSOLE part.

Restart the sshd services to get the new config and you should be able to
login as root.

This is not a recommended practice and I don't use it on production systems
or systems containing data, but it is convenient for the one of instances
where you don't care about good security and only have one user, thy self.

Logging in as ones self and then using su is a preferred approach from a
security perspective.


Dave

unread,
Aug 3, 2009, 3:53:21 AM8/3/09
to
Canuck57 wrote:
> "george2" <geo...@twig.tk> wrote in message
> news:IJGdnavlzaKvVe_X...@brightview.co.uk...
>> When testing ssh by sshing to localhost normally the prompt is like below
>> :
>> root@localhost's password:
>>
>> We a problem server which is not accepting the users password. I have
>> verified the password, but when sshing to localhost and from another
>> server the password is rejected :
>>
>> # ssh localhost
>> Password Authentication
>> Password:
>>
>> I just keeps giving me the password prompt .
>> Also the /etc/issue which is specified in sshd_config as the Banner is not
>> being displayed.
>> On all of our servers this is normally displayed. I have looked at the
>> sshd_config and can see no problem. Root access is allowed , password
>> authentication is enabled etc
>>
>> PermitRootLogin yes
>> Banner /etc/issue
>>
>> George
>
> Two reasons why.
>
> First, edit two files. /etc/ssh/sshd_config and allow root. Next, edit
> /etc/default/login and comment out the CONSOLE part.

If you edit /etc/ssh/sshd_config to allow logins by root, there is no
need to /etc/default/login. SSH seems to bypass that.

--
I respectfully request that this message is not archived by companies as
unscrupulous as 'Experts Exchange' . In case you are unaware,
'Experts Exchange' take questions posted on the web and try to find
idiots stupid enough to pay for the answers, which were posted freely
by others. They are leeches.

0 new messages