[opensuse] sshd broke!!
All, I have a small fileserver that has been running 10.3 for a couple of months. I have easy physical access, but I normally ssh into it. Today I tried and it is failing to accept me. sshd is not even running on the server!!! When I try to start it I get: # rcsshd start Starting SSH daemonDisabling protocol version 2. Could not load host key sshd: no hostkeys available -- exiting. startproc: exit status of parent of /usr/sbin/sshd: 1 failed I assume I need to create a host key, but I don't know where it is kept on SuSE (10.3) Explicit (cut & paste) instructions appreciated. FYI: Glad this is not a remote server. I would not be happy if I had this happen in that situation. Thanks Greg -- Greg Freemyer Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer First 99 Days Litigation White Paper - http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Wednesday 27 February 2008 00:49:34 Greg Freemyer wrote:
All,
I have a small fileserver that has been running 10.3 for a couple of months. I have easy physical access, but I normally ssh into it.
Today I tried and it is failing to accept me. sshd is not even running on the server!!!
When I try to start it I get:
# rcsshd start Starting SSH daemonDisabling protocol version 2. Could not load host key sshd: no hostkeys available -- exiting. startproc: exit status of parent of /usr/sbin/sshd: 1 failed
I assume I need to create a host key, but I don't know where it is kept on SuSE (10.3)
Explicit (cut & paste) instructions appreciated.
What does "ls -l /etc/ssh/" look like? The script /etc/init.d/sshd will automatically create new keys if they aren't there, so one way to get them to appear would be to simply delete the files, assuming they have become corrupt But I wonder if perhaps it's a permissions thing. ssh won't work with keys unless they, and the directories they're in, have sufficiently restrictive permissions. So check those
FYI: Glad this is not a remote server. I would not be happy if I had this happen in that situation.
It rarely happens by itself. Something must have been done to that machine Anders -- Madness takes its toll -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Feb 26, 2008 at 7:05 PM, Anders Johansson
On Wednesday 27 February 2008 00:49:34 Greg Freemyer wrote:
All,
I have a small fileserver that has been running 10.3 for a couple of months. I have easy physical access, but I normally ssh into it.
Today I tried and it is failing to accept me. sshd is not even running on the server!!!
When I try to start it I get:
# rcsshd start Starting SSH daemonDisabling protocol version 2. Could not load host key sshd: no hostkeys available -- exiting. startproc: exit status of parent of /usr/sbin/sshd: 1 failed
I assume I need to create a host key, but I don't know where it is kept on SuSE (10.3)
Explicit (cut & paste) instructions appreciated.
What does "ls -l /etc/ssh/" look like?
# ls -l /etc/ssh/* -rw------- 1 root root 132839 2007-12-12 08:55 /etc/ssh/moduli -rw-r--r-- 1 root root 2641 2008-02-13 14:16 /etc/ssh/ssh_config -rw-r----- 1 root root 3677 2008-02-13 14:12 /etc/ssh/sshd_config -rw------- 1 root root 668 2007-07-25 14:29 /etc/ssh/ssh_host_dsa_key -rw-r--r-- 1 root root 603 2007-07-25 14:29 /etc/ssh/ssh_host_dsa_key.pub -rw------- 1 root root 528 2007-07-25 14:29 /etc/ssh/ssh_host_key -rw-r--r-- 1 root root 332 2007-07-25 14:29 /etc/ssh/ssh_host_key.pub -rw------- 1 root root 883 2007-07-25 14:29 /etc/ssh/ssh_host_rsa_key -rw-r--r-- 1 root root 223 2007-07-25 14:29 /etc/ssh/ssh_host_rsa_key.pub Anders, do you want me to just delete the above and let it regen the keys/ Greg -- Greg Freemyer Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer First 99 Days Litigation White Paper - http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, Feb 26, 2008 at 7:16 PM, Greg Freemyer
On Tue, Feb 26, 2008 at 7:05 PM, Anders Johansson
wrote: On Wednesday 27 February 2008 00:49:34 Greg Freemyer wrote:
All,
I have a small fileserver that has been running 10.3 for a couple of months. I have easy physical access, but I normally ssh into it.
Today I tried and it is failing to accept me. sshd is not even running on the server!!!
When I try to start it I get:
# rcsshd start Starting SSH daemonDisabling protocol version 2. Could not load host key sshd: no hostkeys available -- exiting. startproc: exit status of parent of /usr/sbin/sshd: 1 failed
I assume I need to create a host key, but I don't know where it is kept on SuSE (10.3)
Explicit (cut & paste) instructions appreciated.
What does "ls -l /etc/ssh/" look like?
# ls -l /etc/ssh/* -rw------- 1 root root 132839 2007-12-12 08:55 /etc/ssh/moduli -rw-r--r-- 1 root root 2641 2008-02-13 14:16 /etc/ssh/ssh_config -rw-r----- 1 root root 3677 2008-02-13 14:12 /etc/ssh/sshd_config -rw------- 1 root root 668 2007-07-25 14:29 /etc/ssh/ssh_host_dsa_key -rw-r--r-- 1 root root 603 2007-07-25 14:29 /etc/ssh/ssh_host_dsa_key.pub -rw------- 1 root root 528 2007-07-25 14:29 /etc/ssh/ssh_host_key -rw-r--r-- 1 root root 332 2007-07-25 14:29 /etc/ssh/ssh_host_key.pub -rw------- 1 root root 883 2007-07-25 14:29 /etc/ssh/ssh_host_rsa_key -rw-r--r-- 1 root root 223 2007-07-25 14:29 /etc/ssh/ssh_host_rsa_key.pub
Anders, do you want me to just delete the above and let it regen the keys/
I just noticed the config files were modified a couple weeks ago. I'm not the only one with admin rights, so I assume someone else messed them up. Can I just uninstall sshd and reinstall, or is there a better way to get the conf fiels back to default. Thanks Greg -- Greg Freemyer Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer First 99 Days Litigation White Paper - http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Wednesday 27 February 2008 01:18:51 Greg Freemyer wrote:
I just noticed the config files were modified a couple weeks ago. I'm not the only one with admin rights, so I assume someone else messed them up.
Can I just uninstall sshd and reinstall, or is there a better way to get the conf fiels back to default.
You could just extract the config files from the rpm, and compare them with what you have, to see what was changed mkdir tmpdir cd tmpdir rpm2cpio /path/to/openssh-4.6.rpm|cpio -id will unpack the rpm Otherwise an uninstall/reinstall would also work Anders -- Madness takes its toll -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Thanks,
Working as default now. And I found the yast2.sshd module.
A nice little yast2 module.
I suppose it is time for me to review all the available yast2 modules.
Thanks again
Greg
On Tue, Feb 26, 2008 at 7:26 PM, Anders Johansson
On Wednesday 27 February 2008 01:18:51 Greg Freemyer wrote:
I just noticed the config files were modified a couple weeks ago. I'm not the only one with admin rights, so I assume someone else messed them up.
Can I just uninstall sshd and reinstall, or is there a better way to get the conf fiels back to default.
You could just extract the config files from the rpm, and compare them with what you have, to see what was changed
mkdir tmpdir cd tmpdir rpm2cpio /path/to/openssh-4.6.rpm|cpio -id
will unpack the rpm
Otherwise an uninstall/reinstall would also work
Anders -- Madness takes its toll --
To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-- Greg Freemyer Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer First 99 Days Litigation White Paper - http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Wednesday 2008-02-27 at 01:26 +0100, Anders Johansson wrote:
You could just extract the config files from the rpm, and compare them with what you have, to see what was changed
mkdir tmpdir cd tmpdir rpm2cpio /path/to/openssh-4.6.rpm|cpio -id
will unpack the rpm
Midnight Comander (mc) is easier. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iD8DBQFHxLqGtTMYHG2NR9URAqlJAKCD5FukQdFn6Z0xUnLxAijIN0clRwCfYICD OrX7zw7aMC5oedR+/CIc658= =XX8z -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2008-02-26 at 18:49 -0500, Greg Freemyer wrote:
I have a small fileserver that has been running 10.3 for a couple of months. I have easy physical access, but I normally ssh into it.
Today I tried and it is failing to accept me. sshd is not even running on the server!!!
When I try to start it I get:
# rcsshd start Starting SSH daemonDisabling protocol version 2. Could not load host key sshd: no hostkeys available -- exiting. startproc: exit status of parent of /usr/sbin/sshd: 1 failed
I assume I need to create a host key, but I don't know where it is kept on SuSE (10.3)
It is normally created by sshd the startup script. It is these files: /etc/ssh/ssh_host_key /etc/ssh/ssh_host_dsa_key /etc/ssh/ssh_host_rsa_key check if they exist, and contain something. Check also "/etc/ssh/sshd_config". I believe the keys will be recreated if you delete them. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iD8DBQFHxKtetTMYHG2NR9URAo9XAJ9qwL33TQKdOYYjYcyJHy73tmJxPACfTX2j nYMdrhtfGA5A6IPNMIdZSWc= =JLS1 -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Anders Johansson
-
Carlos E. R.
-
Greg Freemyer