2009/9/12 Hiisi <very-cool@xxxxxxxxxx>
> Date: Sat, 12 Sep 2009 18:13:36 +0100
> From: Aaron Gray <aaronngray.lists@xxxxxxxxxxxxxx>
> Subject: Re: enabling root over ssh on F11
> To: "Community assistance, encouragement, and advice for using
> Fedora." <fedora-list@xxxxxxxxxx>
> Message-ID:
> <9719867c0909121013q5f9f3a0ejf8adcb3425717708@xxxxxxxxxxxxxx>
> Content-Type: text/plain; charset=ISO-8859-1
>
> On 12/09/2009, Todd Zullinger <tmz@xxxxxxxxx> wrote:
>> Aaron Gray wrote:
>>> I need to enable root access via sshd. I will be using certificates and
>>> firewalled access.
>>> I tried remove the suffix " user != root quiet" from /etc/pam.d/gdm.
>>
>> This only affects login via the Gnome Display Manager.
>>
>>> Also added "PermitRootLogin yes" in /etc/ssh/sshd_config.
>>
>> This is, AFAIK, the default. It doesn't hurt having it, but it should
>> not be required.
>>
>>> Also put SELinux into Permissive mode.
>>>
>>> But still neither root sshd nor login work.
>>
>> I know that root logins via sshd work on F11, and there isn't anything
>> special required to allow it that I am aware of. I think you should
>> post the details of the failure you are seeing. Running ssh with -vvv
>> for more verbose output might help. Also, check /var/log/secure on
>> the server to see if it includes any relevant information. If you are
>> using key based authentication, you should look for lines indicating
>> that the ownership and permissions on your keys are incorrect.
>
> Its like the password is being rejected but the password works in<--skip-->
> 'su'. I am getting the following:-
>
> ang@Zinc ~]$ ssh -vvv root@xxxxxxxxxxxx
> OpenSSH_5.2p1, OpenSSL 0.9.8k-fips 25 Mar 2009
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to 192.168.0.16 [192.168.0.16] port 22.
> debug1: Connection established.
> debug1: No more authentication methods to try.Dumb question: are you sure ssh daemon is running on the server? Can
> Permission denied (publickey,gssapi-with-mic,password).
>
> Any clues ?
>
> Aaron
>
>
>
you login as non-root user to it?
Thanks, yeah, a dumb question was what was needed !
I am using the wrong *** IP address !
Very sorry for the noise,
Aaron
-- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
