On Tue, 26 Nov 2019 at 08:36, Jouk Jansen <joukj(a)hrem.nano.tudelft.nl>
wrote:
Hi All,
I'm trying to setup an ssh-server on F31 which logs a user in without a
password, but with a key-exchange. I generated all the keys and placed them
in the right locations. It still asks for the password.
Than comes the strange : I stoped the service by "systemctl stop sshd" and
did run "as root" /usr/sbin/sshd. And than it just worked. (tried to stop
and start with systemctl again made the passwordless login fail again)
Question : why does is work with just running "/usr/sbin/sshd" but not with
"systemctl start sshd" ?
When your root ran /usr/sbin/sshd was the very long list of options used
when sshd is started by systemd included? I see:
$ sudo systemctl status sshd |fold
● sshd.service - OpenSSH server daemon
[...]
CGroup: /system.slice/sshd.service
└─994 /usr/sbin/sshd -D -oCiphers=aes256-gcm(a)openssh.com
,chacha20-pol
y1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm(a)openssh.com
,aes128-ctr,aes128
-cbc -oMACs=hmac-sha2-256-etm@openssh.com,hmac-sha1-etm(a)openssh.com
,umac-128-etm
@openssh.com,hmac-sha2-512-etm(a)openssh.com
,hmac-sha2-256,hmac-sha1,umac-128@open
ssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-gex-sha1-,gss-group14-sha1-
-oKe
xAlgorithms=curve25519-sha256,curve25519-sha256(a)libssh.org
,ecdh-sha2-nistp256,ec
dh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-
hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha5
12,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
-oHostKeyAlgor
ithms=rsa-sha2-256,rsa-sha2-256-cert-v01(a)openssh.com
,ecdsa-sha2-nistp256,ecdsa-s
ha2-nistp256-cert-v01(a)openssh.com
,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v
01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01(a)openssh.com
,ecdsa-sha2-nistp52
1,ecdsa-sha2-nistp521-cert-v01(a)openssh.com
,ssh-ed25519,ssh-ed25519-cert-v01@open
ssh.com,ssh-rsa,ssh-rsa-cert-v01(a)openssh.com
-oPubkeyAcceptedKeyTypes=rsa-sha2-2
56,rsa-sha2-256-cert-v01(a)openssh.com
,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cer
t-v01(a)openssh.com,ecdsa-sha2-nistp384,
ecdsa-sha2-nistp384-cert-v01(a)openssh.com,r
sa-sha2-512,rsa-sha2-512-cert-v01(a)openssh.com
,ecdsa-sha2-nistp521,ecdsa-sha2-nis
tp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01(a)openssh.com
,ssh-rsa,
ssh-rsa-cert-v01(a)openssh.com
-oCASignatureAlgorithms=rsa-sha2-256,ecdsa-sha2-nis
tp256,ecdsa-sha2-nistp384,rsa-sha2-512,ecdsa-sha2-nistp521,ssh-ed25519,ssh-rsa
--
George N. White III