James <[email protected]> writes: > I'm having trouble SSH-ing to root on an atomic host. To make it easy > to debug, I can replicate the issue *from* the host. > > boot up atomic host. I'm using Fedora 21 > > $ cat foo > Host localhost > HostName localhost > User vagrant > Port 22 > UserKnownHostsFile /dev/null > StrictHostKeyChecking no > PasswordAuthentication no > IdentityFile insecure_private_key > IdentitiesOnly yes > LogLevel FATAL > > $ ssh -v -t -F foo root@localhost > OpenSSH_6.8p1, OpenSSL 1.0.1k-fips 8 Jan 2015 > debug1: Reading configuration data foo > debug1: foo line 1: Applying options for localhost > debug1: Connecting to localhost [::1] port 22. > debug1: Connection established. > debug1: key_load_public: No such file or directory > debug1: identity file insecure_private_key type -1 > debug1: key_load_public: No such file or directory > debug1: identity file insecure_private_key-cert type -1 > debug1: Enabling compatibility mode for protocol 2.0 > debug1: Local version string SSH-2.0-OpenSSH_6.8 > debug1: Remote protocol version 2.0, remote software version OpenSSH_6.8 > debug1: match: OpenSSH_6.8 pat OpenSSH* compat 0x04000000 > debug1: SSH2_MSG_KEXINIT sent > debug1: SSH2_MSG_KEXINIT received > debug1: kex: server->client aes128-ctr [email protected] none > debug1: kex: client->server aes128-ctr [email protected] none > debug1: kex: [email protected] need=16 dh_need=16 > debug1: kex: [email protected] need=16 dh_need=16 > debug1: expecting SSH2_MSG_KEX_ECDH_REPLY > debug1: Server host key: ecdsa-sha2-nistp256 > SHA256:bZ890jxWtxfs31anyYZyo5ZO8uCqJ0RIm8ErlRIp0i0 > Warning: Permanently added 'localhost' (ECDSA) to the list of known hosts. > debug1: SSH2_MSG_NEWKEYS sent > debug1: expecting SSH2_MSG_NEWKEYS > debug1: SSH2_MSG_NEWKEYS received > debug1: Roaming not allowed by server > debug1: SSH2_MSG_SERVICE_REQUEST sent > debug1: SSH2_MSG_SERVICE_ACCEPT received > debug1: Authentications that can continue: > publickey,gssapi-keyex,gssapi-with-mic,password > debug1: Next authentication method: publickey > debug1: Trying private key: insecure_private_key > debug1: Authentications that can continue: > publickey,gssapi-keyex,gssapi-with-mic,password > debug1: No more authentication methods to try. > Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
is PermitRootLogin set in /etc/ssh/sshd_config ? Giuseppe
