wrong sshd log alert
my steps: login as: root t...@xx.xx.xx.xx's password: [valid password entered] [logged in] # exit sshd log output: Jun 4 12:03:12 sys sshd[1235]: Connection from MY.IP.AD.DR port 3894 Jun 4 12:03:15 sys sshd[1235]: Failed none for root from MY.IP.AD.DR port 3894 ssh2 Jun 4 12:03:17 sys sshd[1235]: Accepted password for root from MY.IP.AD.DR port 3894 ssh2 Jun 4 12:03:19 sys sshd[1235]: Connection closed by MY.IP.AD.DR Jun 4 12:03:19 sys sshd[1235]: Transferred: sent 3784, received 1928 bytes Jun 4 12:03:19 sys sshd[1235]: Closing connection to MY.IP.AD.DR port 3894 I don't see any reason why i get Failed none for root from alert. I didn't enter any wrong user/password. OpenBSD 4.7-stable.
Re: wrong sshd log alert
I wouldn't call it wrong, necessarily. what ssh client are you using? does it attempt to use authentication-type none in order to get a list of supported authentication types from the server? or because it only wants to prompt you for a password if authentication is required? perhaps confusing or misleading would be a better description for this entry. -ken On Fri, Jun 4, 2010 at 7:11 AM, Dexter Tomisson dexterto...@gmail.comwrote: my steps: login as: root t...@xx.xx.xx.xx's password: [valid password entered] [logged in] # exit sshd log output: Jun 4 12:03:12 sys sshd[1235]: Connection from MY.IP.AD.DR port 3894 Jun 4 12:03:15 sys sshd[1235]: Failed none for root from MY.IP.AD.DR port 3894 ssh2 Jun 4 12:03:17 sys sshd[1235]: Accepted password for root from MY.IP.AD.DR port 3894 ssh2 Jun 4 12:03:19 sys sshd[1235]: Connection closed by MY.IP.AD.DR Jun 4 12:03:19 sys sshd[1235]: Transferred: sent 3784, received 1928 bytes Jun 4 12:03:19 sys sshd[1235]: Closing connection to MY.IP.AD.DR port 3894 I don't see any reason why i get Failed none for root from alert. I didn't enter any wrong user/password. OpenBSD 4.7-stable.
Re: wrong sshd log alert
Yes, my bad.. Using Putty. I've no idea what it does while trying to log in.. On 4 June 2010 16:15, Kenneth Gober kgo...@gmail.com wrote: I wouldn't call it wrong, necessarily. what ssh client are you using? does it attempt to use authentication-type none in order to get a list of supported authentication types from the server? or because it only wants to prompt you for a password if authentication is required? perhaps confusing or misleading would be a better description for this entry. -ken On Fri, Jun 4, 2010 at 7:11 AM, Dexter Tomisson dexterto...@gmail.comwrote: my steps: login as: root t...@xx.xx.xx.xx's password: [valid password entered] [logged in] # exit sshd log output: Jun 4 12:03:12 sys sshd[1235]: Connection from MY.IP.AD.DR port 3894 Jun 4 12:03:15 sys sshd[1235]: Failed none for root from MY.IP.AD.DR port 3894 ssh2 Jun 4 12:03:17 sys sshd[1235]: Accepted password for root from MY.IP.AD.DR port 3894 ssh2 Jun 4 12:03:19 sys sshd[1235]: Connection closed by MY.IP.AD.DR Jun 4 12:03:19 sys sshd[1235]: Transferred: sent 3784, received 1928 bytes Jun 4 12:03:19 sys sshd[1235]: Closing connection to MY.IP.AD.DR port 3894 I don't see any reason why i get Failed none for root from alert. I didn't enter any wrong user/password. OpenBSD 4.7-stable.
