Fabre

#1129956 openssh-server: Cant login with UsePAM no since upgrade to systemd 260rc2 #1129956

Package:: openssh-server

Source:: openssh-server

Description:: secure shell (SSH) server, for secure access from remote machines

Submitter:: manul

Date:: 2026-03-06 17:11:01 UTC

Severity:: normal

#1129956#5

Date:: 2026-03-06 15:16:59 UTC

From:

To:

Dear Maintainer,

I've been running ssh server with the following changes from the defaults:

PasswordAuthentication yes
PermitRootLogin yes
UsePAM no

It has been working normally since a recent upgrade (including systemd and libpam-systemd to version 260rc2).

Since the upgrade, the above no more works.

When I try to ssh to the machine, it reacts as if a wrong password was supplied:

.......
debug1: Trying private key: /home/manul/.ssh/id_ed25519
debug3: no such identity: /home/manul/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: /home/manul/.ssh/id_ed25519_sk
debug3: no such identity: /home/manul/.ssh/id_ed25519_sk: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
root@localhost's password:
debug3: send packet: type 50
debug2: we sent a password packet, wait for reply
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.


I tried also changing the KbdInteractiveAuthentication from the default 'no' to 'yes', but it does not solve the problem.

Changing UsePAM to `yes` fixes the issue, and the password gets recognized again.

How can I continue to use openssh-server with `UsePAM no`?

If this is expected behaviour (for example since updating to more recent versions of systemd etc), the documentation should be updated.

Thanks,
manul

#1129956#10

Date:: 2026-03-06 16:03:37 UTC

From:

To:

I can't reproduce this.  I created an Incus container using testing,
created a test user with a password, applied the configuration you gave
above, tested that I could SSH to it, and then upgraded it to unstable.
Everything still worked fine.

I suggest temporarily adding "LogLevel DEBUG3" to your configuration,
restarting sshd, trying again, and sending the resulting debug log to
this bug report (e.g. `journalctl --unit=ssh.service --since='5 minutes
ago'` if you're booting with systemd, or otherwise look around in your
system logs).  The resulting log may have things you consider sensitive
such as IP addresses, user names, and public keys, so feel free to
redact anything like that; and you should undo that LogLevel change
after gathering this information, since it can violate user privacy.

Thanks,

#1129956#15

Date:: 2026-03-06 16:04:56 UTC

From:

To:

... and after reading your report more carefully I tried setting a
password for root and SSHing directly to that; but that worked fine too.

#1129956#20

Date:: 2026-03-06 16:51:47 UTC

From:

To:

Dear Maintainer,

Thank you for the lighting fast reply.


Some additional information in hope you could reproduce the behaviour:


1) I can reproduce the same issue on my up-to-date laptop running also Debian sid. Not sure how relevant it is as I may have done some similar changes in both machines on some seemingly unrelated configs.


2) The content of my /etc/ssh/sshd_config, only non-commented and non-blank lines (`grep -v -e '^#' -e '^$' /etc/ssh/sshd_config`)
Include /etc/ssh/sshd_config.d/*.conf
KbdInteractiveAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_* COLORTERM NO_COLOR
Subsystem       sftp    /usr/lib/openssh/sftp-server


3) Similarly, the content of the drop-in include option overrides file in .d/ subdirectory (`grep -v -e '^#' -e '^$' /etc/ssh/sshd_config.d/10-modify.conf`)
AddressFamily inet
PasswordAuthentication yes
UsePAM no
PermitRootLogin yes
MaxAuthTries 3
X11Forwarding no
DebianBanner no


4) systemd-related packages installed (`dpkg -l | grep systemd`):
ii  dbus-user-session                                   1.16.2-4                            amd64        simple interprocess messaging system (systemd --user integration)
ii  libpam-systemd:amd64                                260~rc2-1                           amd64        system and service manager - PAM module
ii  libsystemd-shared:amd64                             260~rc2-1                           amd64        systemd shared private library
ii  libsystemd0:amd64                                   260~rc2-1                           amd64        systemd utility library
ii  systemd                                             260~rc2-1                           amd64        system and service manager
ii  systemd-sysv                                        260~rc2-1                           amd64        system and service manager - SysV compatibility symlinks


5) Earlier I mentioned the 'broken' behaviour is as if one provides wrong password (the password is correct though). There is one notable difference though, when I provide
wrong password (with UsePam yes) it waits a bit (1-2 seconds) before asking for password again. When it is 'broken' (with UsePAM no) it re-asks for new password immediadely without any delay.

6) With `UsePAM no` it does not work no matter whether I try to login as root, or as a normal user.


Finally, the log with LogLevel DEBUG3 you asked for. I did the test from the same machine using ssh root@localhost (but effect is the same when trying to login via network):

`#journalctl --unit=ssh.service --since='5 minutes ago'`

Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Stopped ssh.service - OpenBSD Secure Shell server.
Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug3: already daemonized
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug3: oom_adjust_setup
Mar 06 11:26:13 siduxbox.localdomain systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: Set /proc/self/oom_score_adj from 0 to -1000
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug2: fd 6 setting O_NONBLOCK
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: Bind to port 22 on 0.0.0.0.
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: Server listening on 0.0.0.0 port 22.
Mar 06 11:26:13 siduxbox.localdomain sshd[24366]: debug1: ssh_systemd_notify: socket "/run/systemd/notify" notified READY=1
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug3: fd 7 is not O_NONBLOCK
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug2: fd 8 setting O_NONBLOCK
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug1: Forked child 24376.
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug3: oom_adjust_restore
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: Set /proc/self/oom_score_adj to 0
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: rexec start in 7 out 7 newsock 7 config_s 8/9
Mar 06 11:26:17 siduxbox.localdomain sshd[24376]: debug1: sshd-session version OpenSSH_10.2, OpenSSL 3.5.5 27 Jan 2026
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: network sockets: 7, 7
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: fd 7 setting TCP_NODELAY
Mar 06 11:26:17 siduxbox.localdomain sshd[24366]: debug2: server_accept_loop: child 24376 for connection from 127.0.0.1 to 127.0.0.1 received config
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: set_sock_tos: set socket 7 IP_TOS 0xb8
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: server_process_channel_timeouts: setting 0 timeouts
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: channel_clear_timeouts: clearing
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: Connection from 127.0.0.1 port 50472 on 127.0.0.1 port 22 rdomain ""
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Local version string SSH-2.0-OpenSSH_10.2p1
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Remote protocol version 2.0, remote software version OpenSSH_10.2p1 Debian-5
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: compat_banner: match: OpenSSH_10.2p1 Debian-5 pat OpenSSH* compat 0x04000000
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: fd 7 setting O_NONBLOCK
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: Network child is on pid 24377
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: preauth child monitor started
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 51
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: mm_answer_state: config len 3425
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 52
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_state: done
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 51 used once, disabling now
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: sshd-auth version OpenSSH_10.2, OpenSSL 3.5.5 27 Jan 2026 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: server_process_channel_timeouts: setting 0 timeouts [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: channel_clear_timeouts: clearing [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: fd 5 is O_NONBLOCK [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: ssh_sandbox_init: preparing seccomp filter sandbox [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: privsep user:group 101:65534 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: permanently_set_uid: 101/65534 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: append_hostkey_type: ssh-rsa key not permitted by HostkeyAlgorithms [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 20 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_KEXINIT sent [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 20 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_KEXINIT received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: local server KEXINIT proposal [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX algorithms: mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-s,kex-strict-s-v00@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression ctos: none,zlib@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression stoc: none,zlib@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages ctos:  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages stoc:  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: first_kex_follows 0  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: peer client KEXINIT proposal [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX algorithms: mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256 [preaut
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression ctos: none,zlib@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression stoc: none,zlib@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages ctos:  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages stoc:  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: first_kex_follows 0  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: kex_choose_conf: will use strict KEX ordering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: algorithm: mlkem768x25519-sha256 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: host key algorithm: ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 30 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_KEX_ECDH_INIT received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_sshkey_sign: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 6 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 6
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_sign: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: mm_answer_sign: hostkey ssh-ed25519 index 2
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_sign: ssh-ed25519 KEX signature len=83
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 7
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 6 used once, disabling now
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_sshkey_sign: ssh-ed25519 signature len=83 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 31 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 21 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: ssh_packet_send2_wrapped: resetting send seqnr 3 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ssh_set_newkeys: mode 1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: rekey out after 134217728 blocks [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: Sending SSH2_MSG_EXT_INFO [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 21 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: ssh_packet_read_poll2: resetting read seqnr 3 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_NEWKEYS received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ssh_set_newkeys: mode 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: rekey in after 134217728 blocks [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: KEX algorithms: mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-s,kex-strict-s-v00@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression ctos: none,zlib@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: compression stoc: none,zlib@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages ctos:  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: languages stoc:  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: first_kex_follows 0  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: reserved 0  [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: KEX done [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: SSH2_MSG_EXT_INFO received [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: kex_input_ext_info: extension ext-info-in-auth@openssh.com [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex_ext_info_check_ver: ext-info-in-auth@openssh.com=<0> [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 5 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 6 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: attempt 0 failures 0 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_getpwnamallow: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 8 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 9 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 8
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_pwnamallow: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: parse_server_config_depth: config reprocess config len 3425
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: parse_server_config_depth: config /etc/ssh/sshd_config.d/10-modify.conf len 648
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: auth_shadow_acctexpired: today 20518 sp_expire -1 days left -20519
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: account expiration disabled
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 9
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 8 used once, disabling now
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: server_process_channel_timeouts: setting 0 timeouts [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: channel_clear_timeouts: clearing [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: setting up authctxt for root [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_inform_authserv: entering [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 4 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug1: kex_server_update_ext_info: Sending SSH2_MSG_EXT_INFO [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 7 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method none [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 51 [preauth]
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 4
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
Mar 06 11:26:17 siduxbox.localdomain sshd-session[24376]: debug2: monitor_read: 4 used once, disabling now
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method password [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug1: attempt 1 failures 0 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method password [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: entering [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 12 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 13 [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 12
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: auth_shadow_pwexpired: today 20518 sp_lstchg 19423 sp_max 99999
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authpassword: sending result 0
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 13
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: Failed password for root from 127.0.0.1 port 50472 ssh2
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: user not authenticated [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: user_specific_delay: user specific delay 1.203ms [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: ensure_minimum_time_since: elapsed 0.316ms, delaying 5.888ms (requested 6.203ms) [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
Mar 06 11:26:23 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 51 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method password [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug1: attempt 2 failures 1 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method password [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: entering [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 12 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 13 [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 12
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authpassword: sending result 0
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 13
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: Failed password for root from 127.0.0.1 port 50472 ssh2
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: user not authenticated [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: user_specific_delay: user specific delay 1.203ms [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: ensure_minimum_time_since: elapsed 0.254ms, delaying 5.949ms (requested 6.203ms) [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
Mar 06 11:26:28 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 51 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: receive packet: type 50 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: userauth-request for user root service ssh-connection method password [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: attempt 3 failures 2 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug2: input_userauth_request: try method password [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: entering [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 12 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive_expect: entering, type 13 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 12
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_authpassword: sending result 0
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 13
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: Failed password for root from 127.0.0.1 port 50472 ssh2
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_auth_password: user not authenticated [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: user_specific_delay: user specific delay 1.203ms [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: ensure_minimum_time_since: elapsed 0.293ms, delaying 5.911ms (requested 6.203ms) [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_audit_event: entering [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_send: entering, type 112 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: error: maximum authentication attempts exceeded for root from 127.0.0.1 port 50472 ssh2 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: Disconnecting authenticating user root 127.0.0.1 port 50472: Too many authentication failures [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug2: sshpkt_disconnect: sending SSH2_MSG_DISCONNECT: Too many authentication failures [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: send packet: type 1 [preauth]
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: monitor_read: checking request 112
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_answer_audit_event: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: monitor_read_log: child log fd closed
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: entering
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug3: mm_request_receive: monitor fd closed
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: mm_reap: child exited with status 255
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: do_cleanup
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: Killing privsep child 24377
Mar 06 11:26:33 siduxbox.localdomain sshd-session[24376]: debug1: audit_event: unhandled event 12
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug3: server_accept_loop: child 24376 for connection from 127.0.0.1 to 127.0.0.1 closed pipe
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug1: child_close: enter
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: debug1: child_reap: preauth child 24376 for connection from 127.0.0.1 to 127.0.0.1 exited after unsuccessful auth attempt
Mar 06 11:26:33 siduxbox.localdomain sshd[24366]: srclimit_penalise: ipv4: new 127.0.0.1/32 deferred penalty of 5 seconds for penalty: failed authentication




Thank you very much!
manul

#1129956#25

Date:: 2026-03-06 17:09:25 UTC

From:

To:

Dear Maintainer,

I forgot to mention that both my main machine and my laptop are running Debian sid from long time ago, being regularly full-upgrade-d (main machine > 10 years, laptop since > 5 years).
I vaguely remember at some point the password hashing algo for /etc/shadow was changed.
I wonder maybe my /etc/shadow uses the old password hash (for the root and user accounts I test) which may not be supported in the newer ssh/login/whatever service?
And could this be the reason it does not reproduce with brand pristine install of debian testing upgraded to sid..?

Just a thought
manul

#1129956 openssh-server: Cant login with UsePAM no since upgrade to systemd 260rc2 #1129956

Just Reply to ...

Reply to submitter ...

Send control command (Silently)

Set Architecture Tags (Silently)