Check your TCPIP config member.   Something else is listening on port 22.
Perhaps another SSHD.   Issue the netstat command to see the offender.

On Fri, May 26, 2023 at 6:49 PM Wendell Lovewell <
[email protected]> wrote:

> I've done something wrong that I can't identify, and now SSHD terminates
> immediately after starting.
>
> I'm not getting anything helpful on the console or in the joblog.  But I
> am getting these msgs in syslog:
>
> OMVSKERN SSHD3    sshd[67174408]: error: FOTS1442 Bind to port 22 on ::
> failed: EDC5111I Permission denied. (errno2=0x744C7246).
> OMVSKERN SSHD3    sshd[67174408]: error: FOTS1442 Bind to port 22 on
> 0.0.0.0 failed: EDC5111I Permission denied. (errno2=0x744C7246).
> OMVSKERN SSHD3    sshd[67174408]: fatal: FOTS1464 Cannot bind any
> address.
>
> I've looked up the 7246 code:
> JRPORTACCESSAUTH     EQU 29254        * User does not have authority to
> access this port.
>
> OMVSKERN's is UID(0).  Has ALTER access to BPX.DAEMON.  Port 22 is not in
> use, per D TCPIP,,N,SOCKETS
>
> None of the files in /etc/ssh had changed for 4 years, so I don't think
> it's there.  (I did set LogLevel to DEBUG3, which didn't help any.)
>
> The only things I can think of that I might have messed up something with
> keys.  I did try some weeks ago to set up a certificate to bypass entering
> my password when using "ssh user@zos" and didn't get that to work.   And
> I did install a new CERTAUTH this week for the new IBM service requirement
> ("DigiCert Global Root G2"), 'tho I can't imagine that would matter.
>
> Any suggestions would really be appreciated...I'm not much good with
> entering USS commands via a 3270 screen.
>
> TIA,
> Wendell
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>
-- 
Michael Babcock
OneMain Financial
z/OS Systems Programmer, Lead

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to