1752686 Members
5545 Online
108789 Solutions
New Discussion юеВ

SSHD config

 
SSH config
New Member

SSHD config

after adding parameter "AllowUsers" on /opt/ssh/etc/shd_config, i am unable to login via SSH. below are the rrors on syslog:

Aug 22 09:32:30 MIH-DEVT sshd[14498]: User Paul from 192.168.10.51 not allowed because not listed in AllowUsers
Aug 22 09:32:30 MIH-DEVT sshd[14498]: Failed none for invalid user Paul from 192.168.10.51 port 1467 ssh2
Aug 22 09:32:33 MIH-DEVT sshd[14498]: error: PAM: Authentication failed for illegal user Paul from 192.168.10.51

 

 

 

Moved from HP-UX Technical Documentation to HP-UX >security

3 REPLIES 3
Steven Schweda
Honored Contributor

Re: SSHD config

> after adding parameter "AllowUsers" on
> /opt/ssh/etc/shd_config

"sshd_config"? And what, exactly, did you
add to it? If all you did was add a line
which said "AllowUsers", without mentioning
any users to allow, then I'd expect sshd to
reject all users.

> [...] User Paul from 192.168.10.51 not
> allowed because not listed in AllowUsers

Seems pretty clear to me. Of course, my
psychic powers are too weak to tell me what's
actually in your config file, so it's hard to
say for sure if that's the problem.
Steven E. Protter
Exalted Contributor

Re: SSHD config

Shalom,

Please post the sshd_config file.

Its not got anything really secret in it unless you have hard coded the root password or something.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Sandeep_Chaudhary
Trusted Contributor

Re: SSHD config

Please read this from man page:


AllowUsers:
This keyword can be followed by a list of user name patterns,
separated by spaces. If specified, login is allowed only for
user names that match one of the patterns. `*' and `?' can be
used as wildcards in the patterns. Only user names are valid; a
numerical user ID is not recognized. By default, login is
allowed for all users. If the pattern takes the form USER@HOST
then USER and HOST are separately checked, restricting logins to
particular users from particular hosts.




so u have to specify username seperated by spaces. if u dont specify any username it wont allow anyone.