Closed AncientTree closed 10 months ago
@AncientTree what SSHD are you running on your local machine? Are you running Win32-OpenSSH or FreeSSHD?
To clarify on your scenario: you are able to connect from machine 'foo' to machine 'bar', and from 'bar' to 'foo'. You are running into issues when you are trying to connect to localhost on machine 'foo', is this correct?
Are you trying to connect as an admin on the machine? Can you provide the server-side logs? (https://github.com/PowerShell/Win32-OpenSSH/wiki/Troubleshooting-Steps)
Sorry for unclear description.
@AncientTree what SSHD are you running on your local machine? Are you running Win32-OpenSSH or FreeSSHD?
I failed when use Win32-OpenSSH, while success when use FreeSSHD.
To clarify on your scenario: you are able to connect from machine 'foo' to machine 'bar', and from 'bar' to 'foo'. You are running into issues when you are trying to connect to localhost on machine 'foo', is this correct?
Machine 'bar' -> machine 'foo'(Win32-OopenSSH), failed. Machine 'foo' -> machine 'bar'(Win32-OopenSSH), success. Machine 'foo' -> machine 'foo'(Win32-OopenSSH), failed. Machine 'foo' -> machine 'foo'(FreeSSHD), success.
Are you trying to connect as an admin on the machine? Can you provide the server-side logs? (https://github.com/PowerShell/Win32-OpenSSH/wiki/Troubleshooting-Steps)
I can't start sshd service now, the service cannot be opened in the service window that comes with Windows 10. Port 22 is free.
PS C:\WINDOWS\system32> start-Service sshd
Warning: Waiting for service "OpenSSH SSH Server (sshd)" to start...
Warning: Waiting for service "OpenSSH SSH Server (sshd)" to start...
Warning: Waiting for service "OpenSSH SSH Server (sshd)" to start...
But sshd -ddd
command work well.
Do you have your default shell configured? There was a line that caught our attention in the SSHD debug:
User peng-office not allowed because shell c:\\program files\\windowsapps\\microsoft.powershell_7.2.1.0_x64__8wekyb3d8bbwe\\pwsh.exe does not exist
Here is a link to our Wiki for default shells: https://github.com/PowerShell/Win32-OpenSSH/wiki/DefaultShell
Let us know if this changes this issue
Hello sir @maertendMSFT, All problems that I have met get resolve after I install the latest release v9.5.0.0p1-Beta
.
Due to some unknown reasons, my sshd
service could not be started a few days ago, so I cannot tell whether changing the default shell can solve the problem I reported before. I guess I did something wrong when I first installed OpenSSH. So this issue may be close now.
Thank you for your excellent work and wish you a happy new year.
Prerequisites
Steps to reproduce
Host & Client machine: Windows 10 22H2 19045.3570 I install Openssh last version v9.4.0.0p1-Beta by double-click
.msi
file. Configured as wiki guide.Powershell report 'Permission denied, please try again' when I try to ssh local host. (debug info provided)
This PC ssh my other Windows 10 PC, succeed. my other Windows 10 PC ssh this PC with FreessHD.sshd Service, succeed too. I am confused. I have read lots of Google result and no one resolved my problem. I didn’t want to waste the experts’ time, but I really had no other choice. Hoping someone here can give me some tips.
ssh peng-office@localhost -vvv
``` PS C:\Users\Peng-Office\.ssh> ssh peng-office@localhost -vvv OpenSSH_for_Windows_9.4p1, LibreSSL 3.7.3 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/config error:2 debug3: Failed to open file:C:/ProgramData/ssh/ssh_config error:2 debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> 'C:\\Users\\Peng-Office/.ssh/known_hosts' debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> 'C:\\Users\\Peng-Office/.ssh/known_hosts2' debug2: resolving "localhost" port 22 debug3: resolve_host: lookup localhost:22 debug3: ssh_connect_direct: entering debug1: Connecting to localhost [::1] port 22. debug1: Connection established. debug1: identity file C:\\Users\\Peng-Office/.ssh/id_rsa type 0 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_rsa-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_rsa-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_rsa-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_rsa-cert type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ecdsa type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ecdsa-cert type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa_sk error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa_sk.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa_sk error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ecdsa_sk type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa_sk-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa_sk-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ecdsa_sk-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ecdsa_sk-cert type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519 error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519 error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ed25519 type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ed25519-cert type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519_sk error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519_sk.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519_sk error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ed25519_sk type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519_sk-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519_sk-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_ed25519_sk-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_ed25519_sk-cert type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_xmss error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_xmss.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_xmss error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_xmss type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_xmss-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_xmss-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_xmss-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_xmss-cert type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_dsa error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_dsa.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_dsa error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_dsa type -1 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_dsa-cert error:2 debug3: Failed to open file:C:/Users/Peng-Office/.ssh/id_dsa-cert.pub error:2 debug3: failed to open file:C:/Users/Peng-Office/.ssh/id_dsa-cert error:2 debug1: identity file C:\\Users\\Peng-Office/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_for_Windows_9.4 debug1: Remote protocol version 2.0, remote software version OpenSSH_for_Windows_9.4 debug1: compat_banner: match: OpenSSH_for_Windows_9.4 pat OpenSSH* compat 0x04000000 debug2: fd 3 setting O_NONBLOCK debug1: Authenticating to localhost:22 as 'peng-office' debug3: record_hostkey: found key type ED25519 in file C:\\Users\\Peng-Office/.ssh/known_hosts:1 debug3: load_hostkeys_file: loaded 1 keys from localhost debug3: Failed to open file:C:/Users/Peng-Office/.ssh/known_hosts2 error:2 debug1: load_hostkeys: fopen C:\\Users\\Peng-Office/.ssh/known_hosts2: No such file or directory debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts error:2 debug1: load_hostkeys: fopen __PROGRAMDATA__\\ssh/ssh_known_hosts: No such file or directory debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts2 error:2 debug1: load_hostkeys: fopen __PROGRAMDATA__\\ssh/ssh_known_hosts2: No such file or directory debug3: order_hostkeyalgs: have matching best-preference key type ssh-ed25519-cert-v01@openssh.com, using HostkeyAlgorithms verbatim debug3: send packet: type 20 debug1: SSH2_MSG_KEXINIT sent debug3: receive packet: type 20 debug1: SSH2_MSG_KEXINIT received debug2: local client KEXINIT proposal debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: compression ctos: none,zlib@openssh.com,zlib debug2: compression stoc: none,zlib@openssh.com,zlib debug2: languages ctos: debug2: languages stoc: debug2: first_kex_follows 0 debug2: reserved 0 debug2: peer server KEXINIT proposal debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256 debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 debug2: compression ctos: none,zlib@openssh.com debug2: compression stoc: none,zlib@openssh.com debug2: languages ctos: debug2: languages stoc: debug2: first_kex_follows 0 debug2: reserved 0 debug1: kex: algorithm: curve25519-sha256 debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC:PS C:\Program Files\OpenSSH> dir
``` PS C:\Program Files\OpenSSH> dir 目录: C:\Program Files\OpenSSH Mode LastWriteTime Length Name ---- ------------- ------ ---- d----- 2023/11/14 9:25 _manifest -a---- 2023/10/4 17:34 16775 FixHostFilePermissions.ps1 -a---- 2023/10/4 17:35 15953 FixUserFilePermissions.ps1 -a---- 2023/10/4 17:36 1947704 libcrypto.dll -a---- 2023/10/4 17:26 18934 LICENSE.txt -a---- 2023/10/4 17:26 587472 moduli -a---- 2023/10/4 17:26 36008 NOTICE.txt -a---- 2023/10/4 17:26 3470 openssh-events.man -a---- 2023/11/9 16:02 67 openssh.url -a---- 2023/10/4 17:34 15539 OpenSSHUtils.psd1 -a---- 2023/10/4 17:34 48686 OpenSSHUtils.psm1 -a---- 2023/10/4 17:36 436256 scp.exe -a---- 2023/10/4 17:35 384536 sftp-server.exe -a---- 2023/10/4 17:35 465328 sftp.exe -a---- 2023/10/4 17:35 614832 ssh-add.exe -a---- 2023/10/4 17:35 566192 ssh-agent.exe -a---- 2023/10/4 17:35 864704 ssh-keygen.exe -a---- 2023/10/4 17:36 676384 ssh-keyscan.exe -a---- 2023/10/4 17:36 529952 ssh-pkcs11-helper.exe -a---- 2023/10/4 17:36 189472 ssh-shellhost.exe -a---- 2023/10/4 17:35 669104 ssh-sk-helper.exe -a---- 2023/10/4 17:36 1251360 ssh.exe -a---- 2023/10/4 17:35 1343008 sshd.exe -a---- 2023/10/4 17:26 2297 sshd_config_default ```PS C:\Users\Peng-Office\.ssh> dir
``` PS C:\Users\Peng-Office\.ssh> dir 目录: C:\Users\Peng-Office\.ssh Mode LastWriteTime Length Name ---- ------------- ------ ---- -a---- 2023/11/14 9:48 2622 id_rsa -a---- 2023/11/14 9:48 582 id_rsa.pub -a---- 2023/11/14 9:31 92 known_hosts ```PS C:\ProgramData\ssh> dir
``` PS C:\ProgramData\ssh> dir 目录: C:\ProgramData\ssh Mode LastWriteTime Length Name ---- ------------- ------ ---- d----- 2023/11/14 9:25 logs -a---- 2023/11/14 10:27 582 administrators_authorized_keys -a---- 2023/11/14 10:30 7 sshd.pid -a---- 2023/11/14 10:18 2292 sshd_config -a---- 2023/11/14 9:25 513 ssh_host_ecdsa_key -a---- 2023/11/14 9:25 185 ssh_host_ecdsa_key.pub -a---- 2023/11/14 9:25 419 ssh_host_ed25519_key -a---- 2023/11/14 9:25 105 ssh_host_ed25519_key.pub -a---- 2023/11/14 9:25 2610 ssh_host_rsa_key -a---- 2023/11/14 9:25 577 ssh_host_rsa_key.pub ```Service stat
``` PS C:\Users\Peng-Office\.ssh> Get-Service ssh* Status Name DisplayName ------ ---- ----------- Running ssh-agent OpenSSH Authentication Agent Running sshd OpenSSH SSH Server ```sshd_config
``` # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options override the # default value. #Port 22 #AddressFamily any #ListenAddress 0.0.0.0 #ListenAddress :: HostKey __PROGRAMDATA__/ssh/ssh_host_rsa_key #HostKey __PROGRAMDATA__/ssh/ssh_host_dsa_key HostKey __PROGRAMDATA__/ssh/ssh_host_ecdsa_key HostKey __PROGRAMDATA__/ssh/ssh_host_ed25519_key # Ciphers and keying #RekeyLimit default none # Logging #SyslogFacility AUTH #LogLevel INFO # Authentication: #LoginGraceTime 2m #PermitRootLogin prohibit-password #StrictModes yes #MaxAuthTries 6 #MaxSessions 10 PubkeyAuthentication yes # The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2 # but this is overridden so installations will only check .ssh/authorized_keys AuthorizedKeysFile .ssh/authorized_keys #AuthorizedPrincipalsFile none # For this to work you will also need host keys in %programData%/ssh/ssh_known_hosts #HostbasedAuthentication no # Change to yes if you don't trust ~/.ssh/known_hosts for # HostbasedAuthentication #IgnoreUserKnownHosts no # Don't read the user's ~/.rhosts and ~/.shosts files #IgnoreRhosts yes # To disable tunneled clear text passwords, change to no here! PasswordAuthentication yes #PermitEmptyPasswords no # GSSAPI options #GSSAPIAuthentication no #AllowAgentForwarding yes #AllowTcpForwarding yes #GatewayPorts no #PermitTTY yes #PrintMotd yes #PrintLastLog yes #TCPKeepAlive yes #UseLogin no #PermitUserEnvironment no #ClientAliveInterval 0 #ClientAliveCountMax 3 #UseDNS no #PidFile /var/run/sshd.pid #MaxStartups 10:30:100 #PermitTunnel no #ChrootDirectory none #VersionAddendum none # no default banner path #Banner none # override default of no subsystems Subsystem sftp sftp-server.exe # Example of overriding settings on a per-user basis #Match User anoncvs # AllowTcpForwarding no # PermitTTY no # ForceCommand cvs server Match Group administrators AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys ```Expected behavior
Actual behavior
Error details
No response
Environment data