topic Re: SSHD config in Operating System - HP-UX

SSHD config

SSH config — Fri, 29 Mar 2013 07:13:58 GMT

after adding parameter "AllowUsers" on /opt/ssh/etc/shd_config, i am unable to login via SSH. below are the rrors on syslog:

Aug 22 09:32:30 MIH-DEVT sshd[14498]: User Paul from 192.168.10.51 not allowed because not listed in AllowUsers
Aug 22 09:32:30 MIH-DEVT sshd[14498]: Failed none for invalid user Paul from 192.168.10.51 port 1467 ssh2
Aug 22 09:32:33 MIH-DEVT sshd[14498]: error: PAM: Authentication failed for illegal user Paul from 192.168.10.51

Moved from HP-UX Technical Documentation to HP-UX >security

Re: SSHD config

Steven Schweda — Fri, 22 Aug 2008 02:22:32 GMT

> after adding parameter "AllowUsers" on
> /opt/ssh/etc/shd_config

"sshd_config"? And what, exactly, did you
add to it? If all you did was add a line
which said "AllowUsers", without mentioning
any users to allow, then I'd expect sshd to
reject all users.

> [...] User Paul from 192.168.10.51 not
> allowed because not listed in AllowUsers

Seems pretty clear to me. Of course, my
psychic powers are too weak to tell me what's
actually in your config file, so it's hard to
say for sure if that's the problem.

Re: SSHD config

Steven E. Protter — Fri, 22 Aug 2008 03:14:26 GMT

Shalom,

Please post the sshd_config file.

Its not got anything really secret in it unless you have hard coded the root password or something.

SEP

Re: SSHD config

Sandeep_Chaudhary — Fri, 12 Sep 2008 09:48:20 GMT

Please read this from man page:

AllowUsers:
This keyword can be followed by a list of user name patterns,
separated by spaces. If specified, login is allowed only for
user names that match one of the patterns. `*' and `?' can be
used as wildcards in the patterns. Only user names are valid; a
numerical user ID is not recognized. By default, login is
allowed for all users. If the pattern takes the form USER@HOST
then USER and HOST are separately checked, restricting logins to
particular users from particular hosts.

so u have to specify username seperated by spaces. if u dont specify any username it wont allow anyone.