CentOS 5 Server :: Chroot Sshd - Getting Message Debug3: PAM Session Not Opened - Exiting
Jul 21, 2009
I am trying to setup a chroot with a sshd service running. when I start the sshd in the chroot and login I get this message. Can not find anything on google.
[damien@dev ~]$ ssh -l damien localhost -p 2233
damien@localhost's password:
Last login: Tue Jul 21 13:32:52 2009 from 127.0.0.1
debug3: PAM session not opened, exiting
Connection to localhost closed.
I have problem with sshd server, its authenticate user and then terminate the session. Here is debug log: Jan 1 04:26:41 server sshd[29677]: debug1: userauth-request for user root service ssh-connection method none Jan 1 04:26:41 server sshd[29677]: debug1: attempt 0 failures 0 Jan 1 04:26:43 server sshd[29677]: debug1: userauth-request for user root service ssh-connection method password Jan 1 04:26:43 server sshd[29677]: debug1: attempt 1 failures 0 Jan 1 04:26:43 server sshd[29676]: Accepted password for root from xx.xx.xx.xxx port 50971 ssh2 Jan 1 04:26:43 server sshd[29676]: debug1: monitor_child_preauth: root has been authenticated by privileged process .....
If I ssh from my laptop (running F10) to the server (centos 5.2) it asks for the password, but everytime I enter the correct password it says incorrect password. when I do the same from the server to my laptop I can get in just fine. I think my passwords are stored as ssha in the LDAP (I tried clear passwords and that dosen't work either).
I got this script that backs up a server and then keeps only the last 10 backups and removes the rest.Problem is, the part where it deletes any backups older than the last 10, it never reaches that. I'm guessing it is because the ftp session somehow exits the script entirely, especially if there is a problem with the ftp session. But just to make sure, I'm wondering if you all can look at the code to see if I am making it exit accidentally.Here's the code. I left out data like ip address and directory/file names for my security purposes.
Code: #ftp in and grab the file ftp -in xx.xx.xx.xx << EOF
I go and restart ssh and I get this weird message. thought I should be getting ok or fail message, at least thats how I remember it. What do you think?nate@universal-mechanism:~$ sudo service ssh restart
I installed squid 2.7 and want to use squid_session external acl rule. But there is no squid_session in any dir, looked everywhere. On my Ubuntu box I also have squid 2.7 and there I have squid_session.
I am putting together some new systems for my customer and I'm having some trouble with a script that we use to back up files to a DVD R. The problem is that I can't write a 2nd session to the DVD unless I eject the disk and reload it. The drives are slimline type drives, Sony BD-5730S and Teac DV-W28S-V93, so they won't reload without human intervention. Opsys is CentOS 5.4 or RHEL 5.4. I've tried both AMD and Intel based mother boards. If i try this on Fedora 11 or 12 it works fine. This works on IDE attached drives but not a SATA attached drives. Fedora appears to use something called genisoimage instead of mkisofs. I can't get genisoimage to run on CentOS or RHEL.
Here's the code to setup the test files:
rm -f /tmp/BDtest/* mkdir /tmp/BDtest dd if=/dev/zero of=/tmp/BDtest/blank.iso bs=10M count=1 for NUM in {1..160}
I am just customizing CentOS and would like to change "Welcome message[image is attached] to something that I wanted. I went trough the anaconda source rpm and found that OS name is being picked by %s and not sure what %s refers to or where is that variable it pointing to.
recently we decided to make our own panel (like Plesk or cPanel) but for Ubuntu and it will be licenced under GPL (like any other professional sofware).want to make a panel not only that fits our needs but also the needs of other system administrators and domain owners. We researched other panels and found out that non of them has security/look/ease of use in one package. Bad codig is another problem found in other panels.I made a short overwiev of what I think we have to have in the beginning.I Security :1. Completely chroot enviornoment where every single service is in chroot mode (bind,mysql, postfix, .... )2. Easily managed IPtables trough web-based interface. 3. Coding rules has to be strict.
II Software selection : 1. MTA - Postfix 2. POP - dovecot
I have openSSH installed and wish to log on to my Centos container (hosted by switchlinck.co.uk) from my Windows PC using putty. I can log on fine using by entering my username and password, but wish to use an rsa key to log on without a password. I have managed to create the keys with putty, and ammended them to work with openSSH. However, I am unable to find the authorized_keys file to put the key into. SSH is running but that file does not exist in /etc/ssh. When I read different how to sites for this, they all point towards ~/.ssh. I do not have a .ssh directory anywhere on the system. I have tried creating different users but still can not find this directory.
My fedora 14 has OpenSSH_5.5p1, OpenSSL 1.0.0a-fips 1 Jun 2010 running. I am able to use putty to ssh to my fedora. I installed NXSERVER - Version 3.2.0-74-SVN OS (GPL, using backend: 3.3.0) but when i used nxclient to connect to the server i always got 'session x' failed.
Our server is a x86_64 centos 5.5 computer. we installed samba3x-3.5.4-0.70.el5_6.1.x86_64.Samba seems work fine, we don't notice any problem in using it. But in the workstation log file, there are a lot of error messages like:
I am trying to set up an SFTP server. I can log on to it with no problem. But our trading partner for whose benefit we want it cannot. They are unable to make a connection. Here is what happens when they try:
Error: Could not open connection to `ogxxxsft@subdomain.domain.com': Could not connect to `subdomain.domain.com': Unable to connect to server
I want to install MATLAB 2009 on a ubuntu server 10.04 amd64 which has NOT any gui. The installation was successful however when it comes to activate, it says "Could not open display. Exiting.". Here is what I did:
1- ssh -X user@server 2- verified that I can see "xclock" and "xcalc". Yes I can see... 3- cd /mnt ; ./install 4- I can see the GUI wizard since the X11 forward is working. Installation done successfully. 5- cd /opt/Matlab/bin ; ./activate_matlab.sh
One of my servers needs to issue an "apt-get update" command on each of the clients in a lab. However, after the first update, it exits. In trying to replicate the problem with a simpler script, I created the following which fetches the listings of multiple directories from a client:
NUM=0 cat paths | while read DIR; do ssh server-name ls $DIR > /tmp/$NUM.txt NUM=`expr $NUM + 1` done
Again, after the first iteration, the script exists. I tried the following line too, but it made no difference:
I cannot ssh into an RHEL 5.5 server (192.168.20.104) from another RHEL 5.5 server (192.168.20.101) unless server debug is turned on 192.168.20.104, and even then, I have to wait several minutes before the connection is established. scp to and from the 104 server is also not working.Here is the debug output on the 101 server when server debug is not enabled on the 104 server-:
I am sending message from linux to windows system as follows echo "test"|smbclient -M <IP Add>But I am getting "session request failed" message . How can I solve it? <Ip Add> in network and reachable.
I've got Fedora 14 running on an EBS volume on Amazon EC2. I've created a few users and enabled port 22. When I set a password for these users, they can successfully ssh into the instance; even if they logout and login again....until:
If I reboot the machine, they can no longer ssh into the machine (permission denied). If I issue the passwd <user> command and change their passwords, they can login again....until I reboot the machine at which time they cannot login again until I change their passwords. The problem exists even from the machine. That is, if root attempts to ssh into 127.0.0.1 using their username/password, the same problem/resolution exists.
system: centos 5.5 Kernel 2.6.18-194.el5 freshly installed. bind is configured in chroot environment out of the box. placed named.conf in /var/named/chroot/etc and my zone files in /var/named/chroot/var/named.
I have a Redhat fedora core release 6 (2.6.22.9-61.Ns4) server and form time to time ssh fails although I am still able to ping the device and with a reboot the device will start working correctly so upon further investigation it appears the sshd daemon fails.Not knowing a great deal about Linux I thought I would ask some advice on the path I am thinking of taking. The first would be to put an entry in the cron to try and start the ssdh every hour or so. Would this cause issues in the long term run it multiple times when the sshd daemon was still running?
The Second though I had was having a bash script to check if the process was running and if not restarts it and if it was just exit the program which would seem like a neater way to do it but this is where my limited Linux knowledge hits a wall so was looking for suggestion on how to implement this?
I want to make sure sshd service will start after a server reboot. On redhat or centOS I can do "chkconfig sshd on". What's the equivalent command for ubuntu?