Changed my hostname and broke sshd

Itzac · 03-20-2003, 03:43 PM

I changed my hostname yesterday by editting the /etc/sysconfig/network file. I also, for good measure, made similar changes to /etc/hosts. (edit) I've since rebooted my machine.

Now, if I try to ssh into my machine, it says:

Code:

% ssh myname@myboxofwires.net
Connection closed by (my IP)

% ssh myboxofwires.net -l notauser
notauser@myboxofwire.net's password: 
Permission denied (publickey,password,keyboard-interactive).

%

So it will ask for a password from a stranger, but close a legit connection right away. Maybe I missed a step somewhere when changing my hostname. Any thoughts?

Thanks,

Crashed_Again · 03-20-2003, 04:47 PM

Quote:

ssh myname@myboxofwires.net
Connection closed by (my IP)

This leads me to believe that your hostname is resolving to the correct ip address. Did you restart all the services that deal with this? This problem is a little vague so it could be a lot of things. Also check your tcpwrappers. Can you deduce anything from the log files(i.e. /var/log/secure)?

Itzac · 03-20-2003, 06:28 PM

Attempting to connect doesn't seem to generate any messages in /var/log/secure, and things seem to match up from before and after the name change. Are there any other logs or config files I might check? Also how do I check my tcp wrappers?

I did 'ssh -v ...' to a computer I could connect to, and then back to mine. I logged the output and did a diff. The two are almost identical up until the line where the connection is accepted or closed. I'll try refreshing my sshd install.

Crashed_Again · 03-20-2003, 06:35 PM

hmmm...well tcpwrappers are in /etc/hosts.allow and /etc/hosts.deny . Check your hosts.deny file and see if you are denying access to ssh. I don't think thats the problem though.

Do you have a firewall running?

Itzac · 03-20-2003, 07:21 PM

Refreshing the install fixed it. I think it may have been something else I did (tried to x-forward xscreensaver) that may have been silly. Thanks for your help though.

m0rl0ck · 03-20-2003, 07:26 PM

Post the output of:
ssh -v myname@myboxofwires.net

Youll probably have to remove the host keys from the old hostname at least and maybe the user keys too. It might be easier just to move the users .ssh dir to .sshold. That way youd have a backup too.

Crashed_Again · 03-20-2003, 08:32 PM

Quote:

Refreshing the install fixed it.

What did you do re-install sshd?

Itzac · 03-23-2003, 06:54 PM

Well, I found the openssl rpms on my install cds and ran
% rpm -Fvh openssl-sshd*.rpm
or whatever the rpm was called.

I rebooted the machine and that seemed to fix it. All is well, now I'm just closing up a few other security holes.

Thanks for all your help