Attachment 201466 Details for Bug 234793 – Auth.log, sshd_config and level 3 debug of client

Auth.log, sshd_config and level 3 debug of client

sshUserProblem.log (text/plain), 14.09 KB, created by holmez on 2019-01-27 23:07:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: holmez

Created: 2019-01-27 23:07:29 UTC

Size: 14.09 KB

patch

obsolete

>##########
># Server #
>##########
>
>auth.log
>--------
>
>Jan 27 23:21:39 saturn sshd[88945]: Connection from 1.2.3.4 port 47326 on 11.22.33.44 port 22
>Jan 27 23:21:40 saturn sshd[88945]: Failed unknown for myuser from 1.2.3.4 port 47326 ssh2
>Jan 27 23:21:40 saturn sshd[88945]: user myuser login class  [preauth]
>Jan 27 23:21:40 saturn sshd[88945]: Failed unknown for myuser from 1.2.3.4 port 47326 ssh2
>Jan 27 23:21:40 saturn sshd[88945]: user myuser login class  [preauth]
>Jan 27 23:21:40 saturn sshd[88945]: Failed publickey for myuser from 1.2.3.4 port 47326 ssh2: RSA SHA256:x35uTqmt1sjiY/oCqIsN2FA9vLfmPFAdjbLjepUPKD7
>Jan 27 23:21:40 saturn sshd[88945]: Failed unknown for myuser from 1.2.3.4 port 47326 ssh2
>Jan 27 23:21:40 saturn sshd[88945]: user myuser login class  [preauth]
>Jan 27 23:21:40 saturn sshd[88945]: Failed publickey for myuser from 1.2.3.4 port 47326 ssh2: ECDSA SHA256:k3d9PaluEsu+BgsJFP6GwJB51kS4ZDFf+LA7nqUChE6
># [client password request for key]
>Jan 27 23:22:26 saturn sshd[88945]: Failed unknown for myuser from 1.2.3.4 port 47326 ssh2
>Jan 27 23:22:26 saturn sshd[88945]: user myuser login class  [preauth]
>Jan 27 23:22:26 saturn sshd[88945]: Accepted key ED25519 SHA256:urFf3IlBlRk/df2bdAuTY/4+xEL+2JyJ+voTNh2Ohd3 found at /home/myuser/.ssh/authorized_keys:2
>Jan 27 23:22:26 saturn sshd[88945]: Accepted publickey for myuser from 1.2.3.4 port 47326 ssh2: ED25519 SHA256:urFf3IlBlRk/df2bdAuTY/4+xEL+2JyJ+voTNh2Ohd3
>Jan 27 23:22:26 saturn sshd[88945]: User child is on pid 88987
>Jan 27 23:22:27 saturn sshd[88987]: Starting session: shell on pts/6 for myuser from 1.2.3.4 port 47326 id 0
>
>sshd_config
>-----------
>#       $OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $
>#       $FreeBSD: releng/12.0/crypto/openssh/sshd_config 338561 2018-09-10 16:20:12Z des $
>
># This is the sshd server system-wide configuration file.  See
># sshd_config(5) for more information.
>
># This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
>
># The strategy used for options in the default sshd_config shipped with
># OpenSSH is to specify options with their default value where
># possible, but leave them commented.  Uncommented options override the
># default value.
>
># Note that some of FreeBSD's defaults differ from OpenBSD's, and
># FreeBSD has a few additional options.
>
>ListenAddress 11.22.33.44
>
>
># Ciphers and keying
>RekeyLimit 500M 1h
>Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
>KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1
>MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-sha1
>
># Logging
>LogLevel DEBUG
>
># Authentication:
>
>LoginGraceTime 1m
>PermitRootLogin no
>StrictModes yes
>MaxAuthTries 3
>
>PubkeyAuthentication yes
>
># The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
># but this is overridden so installations will only check .ssh/authorized_keys
>AuthorizedKeysFile      .ssh/authorized_keys
>
># For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
>HostbasedAuthentication no
>IgnoreRhosts yes
>
># Change to yes to enable built-in password authentication.
>PasswordAuthentication no
>PermitEmptyPasswords no
>
># Only allow following users
>AllowUsers myuser
>
># Change to no to disable PAM authentication
>ChallengeResponseAuthentication no
>
># Set this to 'no' to disable PAM authentication, account processing,
># and session processing. If this is enabled, PAM authentication will
># be allowed through the ChallengeResponseAuthentication and
># PasswordAuthentication.  Depending on your PAM configuration,
># PAM authentication via ChallengeResponseAuthentication may bypass
># the setting of "PermitRootLogin without-password".
># If you just want the PAM account and session checks to run without
># PAM authentication, then enable this but set PasswordAuthentication
># and ChallengeResponseAuthentication to 'no'.
>UsePAM no
>
>PrintMotd no
>
># override default of no subsystems
>Subsystem       sftp    /usr/libexec/sftp-server
>
>
>
>##########
># Client #
>##########
>OpenSSH_7.3p1, OpenSSL 1.0.1u-freebsd  22 Sep 2016
>debug1: Reading configuration data /home/myotheruser/.ssh/config
>debug1: /home/myotheruser/.ssh/config line 1: Applying options for *
>debug1: /home/myotheruser/.ssh/config line 13: Applying options for saturn
>debug1: Reading configuration data /etc/ssh/ssh_config                                                                                                                                                                                                                                                               [80/715]
>debug1: /etc/ssh/ssh_config line 21: Applying options for *
>debug3: kex names ok: [curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1]
>debug2: resolving "saturn.somedomain.tld" port 22
>debug2: ssh_connect_direct: needpriv 0
>debug1: Connecting to saturn.somedomain.tld [11.22.33.44] port 22.
>debug1: Connection established.
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_rsa type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_rsa-cert type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_dsa type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_dsa-cert type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_ecdsa type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_ecdsa-cert type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_ed25519 type -1
>debug1: Fssh_key_load_public: No such file or directory
>debug1: identity file /home/myotheruser/.ssh/id_ed25519-cert type -1
>debug1: Enabling compatibility mode for protocol 2.0
>debug1: Local version string SSH-2.0-OpenSSH_7.3 FreeBSD-20170902
>debug1: Remote protocol version 2.0, remote software version OpenSSH_7.8 FreeBSD-20180909
>debug1: match: OpenSSH_7.8 FreeBSD-20180909 pat OpenSSH* compat 0x04000000
>debug2: fd 3 setting O_NONBLOCK
>debug1: Authenticating to saturn.somedomain.tld:22 as 'myuser'
>debug3: Fssh_hostkeys_foreach: reading file "/home/myotheruser/.ssh/known_hosts"
>debug3: Fssh_record_hostkey: found key type ECDSA in file /home/myotheruser/.ssh/known_hosts:43
>debug3: Fssh_load_hostkeys: loaded 1 keys from saturn.somedomain.tld
>debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
>debug3: send packet: type 20
>debug1: SSH2_MSG_KEXINIT sent
>debug3: receive packet: type 20
>debug1: SSH2_MSG_KEXINIT received
>debug2: local client KEXINIT proposal
>debug2: KEX algorithms: curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,ext-info-c
>debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-ed25519,rs
>a-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
>debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
>debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
>debug2: MACs ctos: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
>debug2: MACs stoc: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
>debug2: compression ctos: none,zlib@openssh.com,zlib
>debug2: compression stoc: none,zlib@openssh.com,zlib
>debug2: languages ctos:
>debug2: languages stoc:
>debug2: first_kex_follows 0
>debug2: reserved 0
>debug2: peer server KEXINIT proposal
>debug2: KEX algorithms: curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1
>debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519
>debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
>debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
>debug2: MACs ctos: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-sha1
>debug2: MACs stoc: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-sha1
>debug2: compression ctos: none,zlib@openssh.com
>debug2: compression stoc: none,zlib@openssh.com
>debug2: languages ctos:
>debug2: languages stoc:
>debug2: first_kex_follows 0
>debug2: reserved 0
>debug1: kex: algorithm: curve25519-sha256@libssh.org
>debug1: kex: host key algorithm: ecdsa-sha2-nistp256
>debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
>debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
>debug3: send packet: type 30
>debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
>debug3: receive packet: type 31
>debug1: Server host key: ecdsa-sha2-nistp256 SHA256:py2UpnvhTSk25L9PlZyjdh6HxgPKPnuhjO29U3XP38o
>debug3: verify_host_key_dns
>DNS lookup error: general failure # [no clue why]
>debug3: Fssh_hostkeys_foreach: reading file "/home/myotheruser/.ssh/known_hosts"
>debug3: Fssh_record_hostkey: found key type ECDSA in file /home/myotheruser/.ssh/known_hosts:43
>debug3: Fssh_load_hostkeys: loaded 1 keys from saturn.somedomain.tld
>debug1: Host 'saturn.somedomain.tld' is known and matches the ECDSA host key.
>debug1: Found key in /home/myotheruser/.ssh/known_hosts:43
>debug3: send packet: type 21
>debug2: set_newkeys: mode 1
>debug1: rekey after 134217728 blocks
>debug1: SSH2_MSG_NEWKEYS sent
>debug1: expecting SSH2_MSG_NEWKEYS
>debug3: receive packet: type 21
>debug2: set_newkeys: mode 0
>debug1: rekey after 134217728 blocks
>debug1: SSH2_MSG_NEWKEYS received
>debug2: key: /home/myotheruser/.ssh/id_rsa (0x0)
>debug2: key: /home/myotheruser/.ssh/id_dsa (0x0)
>debug2: key: /home/myotheruser/.ssh/id_ecdsa (0x0)
>debug2: key: /home/myotheruser/.ssh/id_ed25519 (0x0)
>debug3: send packet: type 5
>debug3: receive packet: type 7
>debug1: SSH2_MSG_EXT_INFO received
>debug1: Fssh_kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
>debug3: receive packet: type 6
>debug2: service_accept: ssh-userauth
>debug1: SSH2_MSG_SERVICE_ACCEPT received
>debug3: send packet: type 50
>debug3: receive packet: type 51
>debug1: Authentications that can continue: publickey,keyboard-interactive
>debug3: start over, passed a different list publickey,keyboard-interactive
>debug3: preferred publickey,keyboard-interactive,password
>debug3: authmethod_lookup publickey
>debug3: remaining preferred: keyboard-interactive,password
>debug3: authmethod_is_enabled publickey
>debug1: Next authentication method: publickey
>debug1: Trying private key: /home/myotheruser/.ssh/id_rsa
>debug3: sign_and_send_pubkey: RSA SHA256:x35uTqmt1sjiY/oCqIsN2FA9vLfmPFAdjbLjepUPKD7
>debug3: send packet: type 50
>debug2: we sent a publickey packet, wait for reply
>debug3: receive packet: type 51
>debug1: Authentications that can continue: publickey,keyboard-interactive
>debug1: Trying private key: /home/myotheruser/.ssh/id_dsa
>debug3: no such identity: /home/myotheruser/.ssh/id_dsa: No such file or directory
>debug1: Trying private key: /home/myotheruser/.ssh/id_ecdsa
>debug3: sign_and_send_pubkey: ECDSA SHA256:k3d9PaluEsu+BgsJFP6GwJB51kS4ZDFf+LA7nqUChE6
>debug3: send packet: type 50
>debug2: we sent a publickey packet, wait for reply
>debug3: receive packet: type 51
>debug1: Authentications that can continue: publickey,keyboard-interactive
>debug1: Trying private key: /home/myotheruser/.ssh/id_ed25519
>Enter passphrase for key '/home/myotheruser/.ssh/id_ed25519':
>debug3: sign_and_send_pubkey: ED25519 SHA256:urFf3IlBlRk/df2bdAuTY/4+xEL+2JyJ+voTNh2Ohd3
>debug3: send packet: type 50
>debug2: we sent a publickey packet, wait for reply
>debug3: receive packet: type 52
>debug1: Authentication succeeded (publickey).
>Authenticated to saturn.somedomain.tld ([11.22.33.44]:22).
>debug1: channel 0: new [client-session]
>debug3: ssh_session2_open: channel_new: 0
>debug2: channel 0: send open
>debug3: send packet: type 90
>debug1: Requesting no-more-sessions@openssh.com
>debug3: send packet: type 80
>debug1: Entering interactive session.
>debug1: pledge: network
>debug3: receive packet: type 80
>debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0
>debug3: receive packet: type 4
>debug1: Remote: /home/myuser/.ssh/authorized_keys:2: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
>debug3: receive packet: type 91
>debug2: callback start
>debug2: fd 3 setting TCP_NODELAY
>debug3: Fssh_ssh_packet_set_tos: set IP_TOS 0x10
>debug2: client_session2_setup: id 0
>debug2: channel 0: request pty-req confirm 1
>debug3: send packet: type 98
>debug2: channel 0: request shell confirm 1
>debug3: send packet: type 98
>debug2: callback done
>debug2: channel 0: open confirm rwindow 0 rmax 32768
>debug3: receive packet: type 99
>debug2: channel_input_status_confirm: type 99 id 0
>debug2: PTY allocation request accepted on channel 0
>debug2: channel 0: rcvd adjust 2097152
>debug3: receive packet: type 99
>debug2: channel_input_status_confirm: type 99 id 0
>debug2: shell request accepted on channel 0
>Last login: Sun Jan 27 23:04:00 2019 from mars.somedomain.tld

Actions: View

Attachments on bug 234793: 201093 | 201094 | 201095 | 201466 | 201758