Bug#1129956: openssh-server: Log provided
manul <[email protected]> Fri, 06 Mar 2026 11:51:47 -0500
| Newsgroups | gmane.linux.debian.devel.ssh |
|---|---|
| Message-ID | <177281590751.24497.10632567406944209255.reportbug__23230.8460444742$1772816511$gmane$org@siduxbox.localdomain> |
Package: openssh-server Version: 1:10.2p1-5 Followup-For: Bug #1129956 Dear Maintainer, Thank you for the lighting fast reply. Some additional information in hope you could reproduce the behaviour: 1) I can reproduce the same issue on my up-to-date laptop running also Debian sid. Not sure how relevant it is as I may have done some similar changes in both machines on some seemingly unrelated configs. 2) The content of my /etc/ssh/sshd_config, only non-commented and non-blank lines (`grep -v -e '^#' -e '^$' /etc/ssh/sshd_config`) Include /etc/ssh/sshd_config.d/*.conf KbdInteractiveAuthentication no UsePAM yes X11Forwarding yes PrintMotd no AcceptEnv LANG LC_* COLORTERM NO_COLOR Subsystem sftp /usr/lib/openssh/sftp-server 3) Similarly, the content of the drop-in include option overrides file in .d/ subdirectory (`grep -v -e '^#' -e '^$' /etc/ssh/sshd_config.d/10-modify.conf`) AddressFamily inet PasswordAuthentication yes UsePAM no PermitRootLogin yes MaxAuthTries 3 X11Forwarding no DebianBanner no 4) systemd-related packages installed (`dpkg -l | grep systemd`): ii dbus-user-session 1.16.2-4 amd64 simple interprocess messaging system (systemd --user integration) ii libpam-systemd:amd64 260~rc2-1 amd64 system and service manager - PAM module ii libsystemd-shared:amd64 260~rc2-1 amd64 systemd shared private library ii libsystemd0:amd64 260~rc2-1 amd64 systemd utility library ii systemd 260~rc2-1 amd64 system and service manager ii systemd-sysv 260~rc2-1 amd64 system and service manager - SysV compatibility symlinks 5) Earlier I mentioned the 'broken' behaviour is as if one provides wrong password (the password is correct though). There is one notable difference though, when I provide wrong password (with UsePam yes) it waits a bit (1-2 seconds) before asking for password again. When it is 'broken' (with UsePAM no) it re-asks for new password immediadely without any delay. 6) With `UsePAM no` it does not work no matter whether I try to login as root, or as a normal user. Finally, the log with LogLevel DEBUG3 you asked for. I did the test from the same machine using ssh root@localhost (but effect is the same when trying to login via network): `#journalctl --unit=ssh.service --since='5 minutes ago'` Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Stopped ssh.service - OpenBSD Secure Shell server. Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Starting ssh.service - OpenBSD Secure Shell server... Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug3: already daemonized Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug3: oom_adjust_setup Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Started ssh.service - OpenBSD Secure Shell server. Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: Set /proc/self/oom_score_adj from 0 to -1000 Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug2: fd 6 setting O_NONBLOCK Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: Bind to port 22 on 0.0.0.0. Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: Server listening on 0.0.0.0 port 22. Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: ssh_systemd_notify: socket "/run/systemd/notify" notified READY=1 Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug3: fd 7 is not O_NONBLOCK Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug2: fd 8 setting O_NONBLOCK Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug1: Forked child 24376. Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug3: oom_adjust_restore Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: Set /proc/self/oom_score_adj to 0 Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: rexec start in 7 out 7 newsock 7 config_s 8/9 Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: sshd-session version OpenSSH_10.2, OpenSSL 3.5.5 27 Jan 2026 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: network sockets: 7, 7 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: fd 7 setting TCP_NODELAY Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug2: server_accept_loop: child 24376 for connection from 127.0.0.1 to 127.0.0.1 received config Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: set_sock_tos: set socket 7 IP_TOS 0xb8 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: server_process_channel_timeouts: setting 0 timeouts Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: channel_clear_timeouts: clearing Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: Connection from 127.0.0.1 port 50472 on 127.0.0.1 port 22 rdomain "" Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Local version string SSH-2.0-OpenSSH_10.2p1 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Remote protocol version 2.0, remote software version OpenSSH_10.2p1 Debian-5 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: compat_banner: match: OpenSSH_10.2p1 Debian-5 pat OpenSSH* compat 0x04000000 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: fd 7 setting O_NONBLOCK Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: Network child is on pid 24377 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: preauth child monitor started Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 51 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: mm_answer_state: config len 3425 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 52 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_state: done Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 51 used once, disabling now Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: sshd-auth version OpenSSH_10.2, OpenSSL 3.5.5 27 Jan 2026 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: server_process_channel_timeouts: setting 0 timeouts [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: channel_clear_timeouts: clearing [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: fd 5 is O_NONBLOCK [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: ssh_sandbox_init: preparing seccomp filter sandbox [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: privsep user:group 101:65534 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: permanently_set_uid: 101/65534 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: ssh_sandbox_child: attaching seccomp filter program [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: append_hostkey_type: ssh-rsa key not permitted by HostkeyAlgorithms [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 20 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_KEXINIT sent [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 20 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_KEXINIT received [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: local server KEXINIT proposal [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX algorithms: mlkem768x25519-sha256,sntrup761x25519-sha512,[email protected],curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-s,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos: [email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc: [email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression ctos: none,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression stoc: none,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages ctos: [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages stoc: [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: first_kex_follows 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: peer client KEXINIT proposal [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX algorithms: mlkem768x25519-sha256,sntrup761x25519-sha512,[email protected],curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key algorithms: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email protected],[email protected],rsa-sha2-512,rsa-sha2-256 [preaut Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos: [email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc: [email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression ctos: none,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression stoc: none,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages ctos: [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages stoc: [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: first_kex_follows 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: kex_choose_conf: will use strict KEX ordering [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: algorithm: mlkem768x25519-sha256 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: host key algorithm: ssh-ed25519 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 30 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_sshkey_sign: entering [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 6 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 7 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 6 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_sign: entering Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: mm_answer_sign: hostkey ssh-ed25519 index 2 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_sign: ssh-ed25519 KEX signature len=83 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 7 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 6 used once, disabling now Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_sshkey_sign: ssh-ed25519 signature len=83 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 31 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 21 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: ssh_packet_send2_wrapped: resetting send seqnr 3 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ssh_set_newkeys: mode 1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: rekey out after 134217728 blocks [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_NEWKEYS sent [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Sending SSH2_MSG_EXT_INFO [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 7 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: expecting SSH2_MSG_NEWKEYS [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 21 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: ssh_packet_read_poll2: resetting read seqnr 3 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_NEWKEYS received [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ssh_set_newkeys: mode 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: rekey in after 134217728 blocks [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX algorithms: mlkem768x25519-sha256,sntrup761x25519-sha512,[email protected],curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-s,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos: [email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc: [email protected],[email protected],[email protected],aes128-ctr,aes192-ctr,aes256-ctr [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc: [email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression ctos: none,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression stoc: none,[email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages ctos: [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages stoc: [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: first_kex_follows 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: KEX done [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 7 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_EXT_INFO received [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: kex_input_ext_info: extension [email protected] [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex_ext_info_check_ver: [email protected]=<0> [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 5 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 6 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method none [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: attempt 0 failures 0 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_getpwnamallow: entering [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 8 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 9 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 8 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_pwnamallow: entering Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: parse_server_config_depth: config reprocess config len 3425 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: parse_server_config_depth: config /etc/ssh/sshd_config.d/10-modify.conf len 648 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: auth_shadow_acctexpired: today 20518 sp_expire -1 days left -20519 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: account expiration disabled Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 9 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 8 used once, disabling now Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: server_process_channel_timeouts: setting 0 timeouts [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: channel_clear_timeouts: clearing [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: setting up authctxt for root [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_inform_authserv: entering [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 4 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex_server_update_ext_info: Sending SSH2_MSG_EXT_INFO [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 7 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method none [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 51 [preauth] Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 4 Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authserv: service=ssh-connection, style=, role= Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 4 used once, disabling now Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method password [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug1: attempt 1 failures 0 [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method password [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: entering [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 12 [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 13 [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 12 Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: auth_shadow_pwexpired: today 20518 sp_lstchg 19423 sp_max 99999 Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authpassword: sending result 0 Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 13 Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: Failed password for root from 127.0.0.1 port 50472 ssh2 Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: user not authenticated [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: user_specific_delay: user specific delay 1.203ms [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: ensure_minimum_time_since: elapsed 0.316ms, delaying 5.888ms (requested 6.203ms) [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth] Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 51 [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method password [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug1: attempt 2 failures 1 [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method password [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: entering [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 12 [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 13 [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 12 Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authpassword: sending result 0 Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 13 Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: Failed password for root from 127.0.0.1 port 50472 ssh2 Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: user not authenticated [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: user_specific_delay: user specific delay 1.203ms [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: ensure_minimum_time_since: elapsed 0.254ms, delaying 5.949ms (requested 6.203ms) [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth] Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 51 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method password [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: attempt 3 failures 2 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method password [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: entering [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 12 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 13 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 12 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authpassword: sending result 0 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 13 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: Failed password for root from 127.0.0.1 port 50472 ssh2 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: user not authenticated [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: user_specific_delay: user specific delay 1.203ms [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: ensure_minimum_time_since: elapsed 0.293ms, delaying 5.911ms (requested 6.203ms) [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_audit_event: entering [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 112 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: error: maximum authentication attempts exceeded for root from 127.0.0.1 port 50472 ssh2 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: Disconnecting authenticating user root 127.0.0.1 port 50472: Too many authentication failures [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug2: sshpkt_disconnect: sending SSH2_MSG_DISCONNECT: Too many authentication failures [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 1 [preauth] Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 112 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_audit_event: entering Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: monitor_read_log: child log fd closed Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: monitor fd closed Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: mm_reap: child exited with status 255 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: do_cleanup Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: Killing privsep child 24377 Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: audit_event: unhandled event 12 Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug3: server_accept_loop: child 24376 for connection from 127.0.0.1 to 127.0.0.1 closed pipe Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug1: child_close: enter Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug1: child_reap: preauth child 24376 for connection from 127.0.0.1 to 127.0.0.1 exited after unsuccessful auth attempt Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: srclimit_penalise: ipv4: new 127.0.0.1/32 deferred penalty of 5 seconds for penalty: failed authentication Thank you very much! manul -- System Information: Debian Release: forky/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 6.18.15+deb14-amd64 (SMP w/12 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages openssh-server depends on: ii debconf [debconf-2.0] 1.5.92 ii init-system-helpers 1.69 ii libaudit1 1:4.1.2-1+b1 ii libc6 2.42-13 ii libcom-err2 1.47.2-3+b8 ii libgssapi-krb5-2 1.22.1-2 ii libkrb5-3 1.22.1-2 ii libpam-modules 1.7.0-5+b1 ii libpam-runtime 1.7.0-5 ii libpam0g 1.7.0-5+b1 ii libselinux1 3.9-4+b1 ii libssl3t64 3.5.5-1 ii libwrap0 7.6.q-36+b2 ii libwtmpdb0 0.75.0-5 ii openssh-client 1:10.2p1-5 ii openssh-sftp-server 1:10.2p1-5 ii procps 2:4.0.4-9+b1 ii runit-helper 2.16.5 ii systemd [systemd-sysusers] 260~rc2-1 ii ucf 3.0052 ii zlib1g 1:1.3.dfsg+really1.3.1-3 Versions of packages openssh-server recommends: ii libpam-systemd [logind] 260~rc2-1 pn ncurses-term <none> ii passwd 1:4.19.3-1 ii xauth 1:1.1.2-1.1 Versions of packages openssh-server suggests: pn molly-guard <none> pn monkeysphere <none> ii ssh-askpass 1:1.2.4.1-16+b1 pn ufw <none> -- debconf information: openssh-server/password-authentication: true openssh-server/permit-root-login: true