× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. OPENSOURCE
  3. March 2018

Re: [IBMiOSS] ssh i Access Solutions SSH client

Here's how I've set that value. Not sure the difference. The error "feels
like" it is running into the 8 char limit issue.

ADDENVVAR ENVVAR(PASE_USRGRP_LIMITED) VALUE('N') LEVEL(*SYS)

I don't believe it is a permissions issue, and I know you're doing password
vs key auth, but you could run the following commands for the user you're
trying to log in with:

chmod 755 ~
chmod 700 ~/.ssh
chmod 600 ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa.pub
chmod 600 ~/.ssh/authorized_keys


Aaron Bartell
IBM i hosting, starting at $157/month. litmis.com/spaces


On Wed, Mar 28, 2018 at 7:08 AM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

I updated the config, restarted SSH and still getting the same thing.

Here's the log that Aaron had me get.

Failed password for invalid user... which is it? Is the user invalid or is
the password invalid.. lol!! They are both mutually exclusive!

readfds = 0x2018

got a message (1, 0x8)

logmsg: pri 46, flags 0, from AS400, msg Mar 28 07:03:46 sshd[288273]:
Failed password for invalid user <userid> from xx.xx.xx.xx
port 53372 ssh2

readfds = 0x2018


On Tue, Mar 27, 2018 at 7:56 PM, Aaron Bartell <aaronbartell@xxxxxxxxx>
wrote:

Go into qp2term and run:

$ syslogd -d

They try logging in again and review the console messages from the
qp2term
session.

On Tue, Mar 27, 2018, 7:31 PM Bradley Stone <bvstone@xxxxxxxxx> wrote:

I'll give it a look, but I tried another one with a smaller id and got
the
same thing.

I thought maybe it was because I had already logged in with a different
id.


On Tue, Mar 27, 2018 at 7:16 PM, Alan Seiden <alan@xxxxxxxxxxxxxxx>
wrote:

Brad, a wild guess, is your user profile longer than 8 characters?

If so, you’ll need to configure SSHD to allow profiles longer than 8
chars
in length.

There are several blog posts on this topic. Here is mine:
https://www.seidengroup.com/2015/02/06/overcome-8-
character-user-profile-limit-ssh-ibm-i/ <
https://www.seidengroup.com/
2015/02/06/overcome-8-character-user-profile-limit-ssh-ibm-i/>

Alan

Thanks,
Alan
—
Alan Seiden
Principal, Seiden Group
The PHP on IBM i Experts



Free PHP tips: http://www.seidengroup.com/tips <
http://www.seidengroup.com/tips>

Office: 201-447-2437 Cell: 201-248-4704
http://www.seidengroup.com <http://www.seidengroup.com/> |
alan@xxxxxxxxxxxxxxx <mailto:alan@xxxxxxxxxxxxxxx>
http://twitter.com/alanseiden <http://twitter.com/alanseiden>
On Mar 27, 2018, at 7:49 PM, Bradley Stone <bvstone@xxxxxxxxx
<mailto:
bvstone@xxxxxxxxx>> wrote:

I am trying to log into an SSH session with i Access Client
solutions.

I was able to use another id no problem.

Using this new ID I get:

"Permission denied, please try again."

I know I'm using the right password.

Permission to what???? :)
--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx <mailto:
OpenSource@xxxxxxxxxxxx>
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/opensource <
https://lists.midrange.com/mailman/listinfo/opensource>
or email: OpenSource-request@xxxxxxxxxxxx <mailto:
OpenSource-request@
midrange.com>
Before posting, please take a moment to review the archives
at https://archive.midrange.com/opensource <
https://archive.midrange.com/opensource>.

--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/opensource.

--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/opensource.

--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/opensource.

--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/opensource.


As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.