Re: [SOLVED] SSH after upgrade
On Sun, 2019-10-06 at 11:15 -0500, Mike Chambers wrote:
On Sun, 2019-10-06 at 18:05 +0200, alciregi(a)gmail.com wrote:
> On Sun, 2019-10-06 at 10:46 -0500, Mike Chambers wrote:
> > Upgraded server from Fedora 30 to 31 (updated to present), and
> > ssh
> > into
> > that server works fine as normal user, but no longer lets me
> > login
> > as
> > root. I can login as root from the server machine itself, and
> > can
> > login via su - but just cant' from ssh.
> >
> > Any ideas what changed or got replaced so revert it back?
>
> It could it be related to this change:
>
https://fedoraproject.org/wiki/Releases/31/ChangeSet#Disable_Root_Passwor...
Had to add the below line to my sshd.conf file and works now.
PermitRootLogin yes
Guess it changed or got removed when I did the upgrade (upgraded via
dnf, not a clean install), but added that line and it works now.
No, this IS intentional change of Fedora 31 to disable password root
logins. This account is very frequent target of brute-force attacks
(and this change was made by upstream OpenSSH years ago).
Please, do not advise this as a general solution. The correct solution
is to setup public key authentication or use different user and sudo
for the administrative tasks.
Regards,
--
Jakub Jelen
Senior Software Engineer
Security Technologies
Red Hat, Inc.