<div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">The sshd pam setting is the one you want to make sure works because that appears to link sshd access to valid system users for ssh access.</div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif"><br></div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">This is a link to my bog stock login. and any user I create (as a system user) can access via SSH. except for root. but root cannot even log in at this point.</div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif"><br><div class="gmail_chip gmail_drive_chip" style="width:386px;height:20px;max-height:20px;background-color:#f5f5f5;margin:6px 0;padding:10px;color:#222;font:normal 400 14px/20px 'Google Sans',sans-serif;border:1px solid #ddd"><a href="https://drive.google.com/open?id=1VadPv7RzeJZQca89aTi5yIJ5F76V49_gkJ_vGgZCt9U" target="_blank" style="color:rgb(32,33,36);display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;text-decoration:none;border:none;width:100%" aria-label="Ubuntu Stock sshdconfig"><img style="vertical-align: text-bottom; border: none; padding-right: 10px; height: 20px;" alt="" src="https://drive-thirdparty.googleusercontent.com/32/type/application/vnd.google-apps.document"> <span dir="ltr" style="vertical-align:bottom">Ubuntu Stock sshdconfig</span></a></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Oct 22, 2024 at 2:32 AM Rusty Carruth via PLUG-discuss <<a href="mailto:plug-discuss@lists.phxlinux.org">plug-discuss@lists.phxlinux.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u>
<div>
<p>'for fun' I pasted the text of your email in to chatgpt, it had
some interesting advice:</p>
<p><strong>Verify User Exists</strong>: - probably not your
problem. <br>
</p>
<pre><div><div><strong>Check User's Shell</strong>: Ensure that the user "default" has a valid shell. You can check the user's entry in <code>/etc/passwd</code></div><div><code>Good suggestion, imho, but you did imply you'd logged in as the user, so this is also (probably) a red herring.</code></div><div><code>
</code></div><div><strong>Home Directory</strong>: Ensure the user "default" has a home directory. </div><div>
</div><div><strong>SSH Key/Password</strong>: If you're trying to log in using SSH keys, ensure that the public key is correctly placed in <code>/home/default/.ssh/authorized_keys</code> and that the permissions are set correctly</div><div>- since you've not logged in via SSH, this is probably also a herring.</div><div>
</div><div>However, the suggestion: If you’re using password authentication, make sure the user has a password set Might be helpful.</div><div>I'm skipping firewall suggestion.</div><div><strong>Log Files</strong>: Since <code>/var/log/faillog</code> is empty, also check <code>/var/log/auth.log</code> for any messages related to SSH login attempts </div><div>- very good idea.</div><div>
</div><div>Three's more, but I'm guessing the log files are the most likely place to start, after the suggestions everyone else gave.</div><div>
</div></div></pre>
<p></p>
<div>On 10/21/24 23:22, Rusty Carruth via
PLUG-discuss wrote:<br>
</div>
<blockquote type="cite">The
other questions are all great, but can you ssh from the server to
itself as the desired user? That is, ssh theSSHdude@localhost ,
which should hopefully rule out network issues ;-)
<br>
<br>
I'll also mention that I had a weird issue with SSH where I could
ssh from machine A to machine B, but not from B to A! THAT turned
out to be a netmask issue! And ChatGPT ALMOST got the answer. You
could try your favorite AI to see if it can help, but be sure to
give it more info than you think you should - I should have given
it the output of ifconfig on both computers and it probably would
have caught it....
<br>
<br>
On 10/21/24 18:46, Keith Smith via PLUG-discuss wrote:
<br>
<blockquote type="cite">Hi,
<br>
<br>
I am a little stuck.
<br>
<br>
I am trying to configure a user that will allow me to log into
an Ubuntu 24.04lts server via SSH.
<br>
<br>
I created a line : "AllowUsers default" in /etc/ssh/sshd_config
<br>
<br>
Then sudo systemctl restart ssh
<br>
<br>
Try to login and get "client_loop: send disconnect: Broken pipe"
<br>
<br>
sudo tail /var/log/faillog returns nothing.
<br>
<br>
I can SSH into the server from my Kubuntu desktop under the
default user created during server o/s install
<br>
<br>
A search says it is probably a network issue. Does not make
sense given I can SSH in using another user.
<br>
<br>
Any thoughts are much appreciated.
<br>
<br>
Keith
<br>
<br>
<br>
---------------------------------------------------
<br>
PLUG-discuss mailing list: <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a>
<br>
To subscribe, unsubscribe, or to change your mail settings:
<br>
<a href="https://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">https://lists.phxlinux.org/mailman/listinfo/plug-discuss</a>
<br>
</blockquote>
---------------------------------------------------
<br>
PLUG-discuss mailing list: <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a>
<br>
To subscribe, unsubscribe, or to change your mail settings:
<br>
<a href="https://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">https://lists.phxlinux.org/mailman/listinfo/plug-discuss</a>
<br>
</blockquote>
</div>
---------------------------------------------------<br>
PLUG-discuss mailing list: <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="https://lists.phxlinux.org/mailman/listinfo/plug-discuss" rel="noreferrer" target="_blank">https://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br>
</blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature">A mouse trap, placed on top of your alarm clock, will prevent you from rolling over and going back to sleep after you hit the snooze button.<br><br>Stephen<br><br></div>