Privilege separation user sshd does not exist

[Jdamian]

Hi.

I upgraded HP OpenSSH (product number T1471AA) from 3.10.002 to 3.50.000.

When starting new OpenSSH daemon, the following error message is printed:

9562: Privilege separation user sshd does not
exist
# IT CODE: 255

I added the following entry in /etc/opt/ssh/sshd_config file:

UsePrivilegeSeparation no

Then OpenSSH starts but my old OpenSSH configurations (3.10.002) didn't include this entry and started fine. This entry is available in both releases (man pages show it) but...
why wasn't necessary in old release ?

How many other hidden tricks are ?

Thanx a lot.

[Brian Bergstrand · Accepted solution]

Privelage separation was added in the 3.4 release I believe. If you want to use it (and you should), just create a sshd user and then re-enable the option in your config file.

As for hidden tricks, there are none. Each release can add something new, but it is all documented in the page or on the web.

HTH.

PS: HP's latest OSSH bundle is 3.6.1 with the buffer patch from 3.7.1. You probably should grab that.

[Brian Bergstrand]

Sorry, that should be:

"all documented in the MAN page or on the web"