Re: [Vserver] sshd problem

From: Xavier Montagutelli <xavier.montagutelli_at_unilim.fr>
Date: Thu 22 Jun 2006 - 08:01:29 BST
Message-Id: <200606220901.30060.xavier.montagutelli@unilim.fr>

On Wednesday 21 June 2006 17:41, HongDan wrote:
> I'm using a 2.6.12 kernel with vs2.0.15 patched, and util-vserver 0.3.210.
> When I tried to login a guest via ssh, it failed like this:
>
> -------------------------Snip---------------------------------
> [root@tu024048 ~]# ssh hd@59.66.24.49
> hd@59.66.24.49's password:
> Last login: Mon Jun 19 12:36:57 2006 from th024049.ip.tsinghua.edu.cn
> Connection to 59.66.24.49 closed.
> ----------------------------Snap-------------------------------

Disable the pam_loginuid module in your sshd pam file :

 session required pam_loginuid.so

>
> It seemed that authentication has passed, but I don't know why the
> connection was closed immediately. The 59.66.24.49 is binded to a guest
> named 'newgast', which was copied from another host, where its sshd worked
> very well.
>
> I also started sshd in debug mode, in which I got information as followed:
>
> ------------------------Snip---------------------------------------
> debug1: userauth-request for user hd service ssh-connection method password
> debug1: attempt 5 failures 5
> debug1: PAM: password authentication accepted for hd
> debug1: do_pam_account: called
> Accepted password for hd from 59.66.24.49 port 51976 ssh2
> debug1: monitor_child_preauth: hd has been authenticated by privileged
> process
> Accepted password for hd from 59.66.24.49 port 51976 ssh2
> debug1: temporarily_use_uid: 500/500 (e=0/500)
> debug1: ssh_gssapi_storecreds: Not a GSSAPI mechanism
> debug1: restore_uid: 0/500
> PAM: pam_open_session(): Cannot make/remove an entry for the specified
> session
> debug1: PAM: reinitializing credentials
> debug1: permanently_set_uid: 500/500
> debug1: Entering interactive session for SSH2.
> debug1: server_init_dispatch_20
> debug1: server_input_channel_open: ctype session rchan 0 win 65536 max
> 16384 debug1: input_session_request
> debug1: channel 0: new [server-session]
> debug1: session_new: init
> debug1: session_new: session 0
> debug1: session_open: channel 0
> debug1: session_open: session 0: link with channel 0
> debug1: server_input_channel_open: confirm session
> debug1: server_input_channel_req: channel 0 request pty-req reply 0
> debug1: session_by_channel: session 0 channel 0
> debug1: session_input_channel_req: session 0 req pty-req
> debug1: Allocating pty.
> debug1: session_new: init
> debug1: session_new: session 0
> debug1: session_pty_req: session 0 alloc /dev/pts/3
> debug1: server_input_channel_req: channel 0 request shell reply 0
> debug1: session_by_channel: session 0 channel 0
> debug1: session_input_channel_req: session 0 req shell
> debug1: PAM: setting PAM_TTY to "/dev/pts/3"
> debug1: Setting controlling tty using TIOCSCTTY.
> debug1: Received SIGCHLD.
> debug1: session_by_pid: pid 5363
> debug1: session_exit_message: session 0 channel 0 pid 5363
> debug1: session_exit_message: release channel 0
> debug1: session_by_tty: session 0 tty /dev/pts/3
> debug1: session_pty_cleanup: session 0 release /dev/pts/3
> debug1: session_by_channel: session 0 channel 0
> debug1: session_close_by_channel: channel 0 child 0
> debug1: session_close: session 0 pid 0
> debug1: channel 0: free: server-session, nchannels 1
> Connection closed by 59.66.24.49
> debug1: do_cleanup
> debug1: PAM: cleanup
> Closing connection to 59.66.24.49
> debug1: PAM: cleanup
> --------------------------------Snap-------------------------
>
> Maybe it could help. Can anyone help me?
>
> Thanks!
>
> _______________________________________________
> Vserver mailing list
> Vserver@list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver

-- 
Xavier Montagutelli                      Tel : +33 (0)5 55 45 77 20
Service Commun Informatique              Fax : +33 (0)5 55 45 75 95
Universite de Limoges
123, avenue Albert Thomas
87060 Limoges cedex
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu Jun 22 08:02:40 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 22 Jun 2006 - 08:02:47 BST by hypermail 2.1.8