Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #202484

Re: ssh

Show all headers | View raw

On 11/14/18 10:13 PM, Alan Taylor wrote:
> Success … sort of.
> 
> Removing "BatchMode yes” from the backuppc users .ssh/config file fixed everything EXCEPT
> the backuppc user still could not ssh out from the backup computer (sirius) to other computers.
> However, the error message was now a lot clearer (complaining that login not allowed because the account was locked).
> All of the client computers have a backuppc user with the shell set to /bin/false (the recommended procedure) as there is no shell login required on these computers.
> However, changing this to /bin/bash solved the problem … backuppc user can now ssh from the backup computer (sirius) to others.
> 
> Any ideas as to what may be causing this last issue ?
> 
> PS UsePam is set to yes


If you want to log in to an account whose /etc/passwd shell is 
/bin/false, one trick is to su(1) to root, then su(1) to that account 
using the '--shell' option:

     2018-11-15 09:17:06 root@tinkywinky ~
     # grep ntp /etc/passwd
     ntp:x:118:124::/home/ntp:/bin/false

     2018-11-15 09:17:10 root@tinkywinky ~
     # su -l -s /bin/bash ntp
     No directory, logging in with HOME=/
     ntp@tinkywinky:/$


Can backuppc on one "other" computer log into another "other" computer?


It would help if you posted your console session indicating source 
machine (prompt), command issued, and output displayed.


It would help if you posted the active lines in ~/.ssh/config, 
/etc/ssh/ssh_config, and /etc/ssh/sshd_config on the relevant machines:

     $ grep . ~/.ssh/config | grep -v '#'

     $ grep . /etc/ssh/ssh_config | grep -v '#'

     $ grep . /etc/ssh/sshd_config | grep -v '#'


David

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: ssh David Christensen <dpchrist@holgerdanske.com> - 2018-11-13 04:30 +0100
  Re: ssh Alan Taylor <ataylor@ieee.org> - 2018-11-13 05:40 +0100
    Re: ssh David Christensen <dpchrist@holgerdanske.com> - 2018-11-13 08:40 +0100
      Re: ssh Alan Taylor <alan.james.taylor@gmail.com> - 2018-11-15 07:20 +0100
        Re: ssh David Christensen <dpchrist@holgerdanske.com> - 2018-11-15 18:30 +0100
          Re: ssh Alan Taylor <alan.james.taylor@gmail.com> - 2018-11-17 05:30 +0100
            Re: ssh Michael Howard <mike@dewberryfields.co.uk> - 2018-11-18 13:00 +0100
              Re: ssh Alan Taylor <alan.james.taylor@gmail.com> - 2018-11-19 03:50 +0100
                Re: ssh Michael Howard <mike@dewberryfields.co.uk> - 2018-11-19 08:40 +0100
                Re: ssh john doe <johndoe65534@mail.com> - 2018-11-19 09:50 +0100
                Re: ssh Michael Stone <mstone@debian.org> - 2018-11-19 14:40 +0100
                Re: ssh Jim Popovitch <jim@k4vqc.com> - 2018-11-19 15:50 +0100
                Re: ssh Michael Stone <mstone@debian.org> - 2018-11-19 18:20 +0100
                Re: ssh Jim Popovitch <jim@k4vqc.com> - 2018-11-19 19:10 +0100
                Re: ssh Michael Stone <mstone@debian.org> - 2018-11-20 03:20 +0100
                Re: ssh Greg Wooledge <wooledg@eeg.ccf.org> - 2018-11-19 14:40 +0100

csiph-web