Operating System - HP-UX
1834736 Members
2842 Online
110070 Solutions
New Discussion

Re: sshd not allowed non_root_user

 
Oleg_23
Occasional Contributor

sshd not allowed non_root_user

Hi, ALL

I use "HP-UX Secure Shell is based on OpenSSH version 3.1p1.".
OS - HP-UX 11.11.

When I connect to server as root it`s Ok.
When I connect to server as another user server says:
"Disconnecting: Change of username or service not allowed: (root,ssh-connection) -> (oracle,ssh-connection)"

What I do wrong?

Thanking you in advance.
4 REPLIES 4
Steve Steel
Honored Contributor

Re: sshd not allowed non_root_user

Hi

Edit sshd_config

set LogLevel VERBOSE

try again


Post the contents of /var/adm/syslog/syslog.log


steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)
Oleg_23
Occasional Contributor

Re: sshd not allowed non_root_user

====== Cut from syslog.log ================

: Connection from port 3962
: Enabling compatibility mode for protocol 2.0
: Failed none for root from port 3962 ssh2
: Disconnecting: Change of username or service not allowed: (root,ssh-connection) -> (oracle,ssh-connection)


===========================================
Steve Steel
Honored Contributor

Re: sshd not allowed non_root_user

Hi

Only user root is allowed and not oracle


see

http://www.oreilly.com/catalog/sshtdg/chapter/ch08.html


Trusted-Host Access Control
A limited type of per-account configuration is possible if you use trusted-host authentication rather than public-key authentication. Specifically, you can permit SSH access to your account based on the client's remote username and hostname via the system files /etc/shosts.equiv and /etc/hosts.equiv, and personal files ~/.rhosts and ~/.shosts. A line like:


To get more info put verbose to debug . Then post the output


Steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)
Steve Steel
Honored Contributor

Re: sshd not allowed non_root_user

Hi


Also look at

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xf1a73a7b3682d611abdb0090277a778c,00.html

and the referenced url

http://support2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000061597111#Q5


steve Steel
If you want truly to understand something, try to change it. (Kurt Lewin)