Jump to content
docgyver

SSH and Denyhosts updated for v6.1

90 posts in this topic Last Reply

Recommended Posts

I'm trying to change the port from 22 to 2222 and was wondering why I cannot? It always defaults back to 22. I've deleted the plugin and reinstalled.

/etc/ssh/sshd_config

appears to be empty...

 

EDIT: Never mind, delete /boot/config/ssh/* and rebooted

Edited by joelones

Share this post


Link to post

Ssh plugin works, idk about denyhosts tho since I haven't used it in a while.

Share this post


Link to post

I started a new thread for this, but was asked to post here: 

 

 

Can someone explain to me what "Available options for SSH Users" is in the settings -> SSH tab?

Its just a list of users and I cant work out what, if anything, I'm supposed to use it for?!

I've checked the Wiki user manual, there is no section for settings -> SSH

 

 

Share this post


Link to post

By default, it's just the root user that can log in via ssh, with the ssh plugin you can allow other users to login via ssh as well. You can also block root access if you wish. For security, it would be best to block root access and just give normal users access. That's what the user list is for, so you can configure ssh access on a user level.

Share this post


Link to post

Hi

Fails to install on unRaid 6.5.3 for me.

 

plugin: installing: https://raw.githubusercontent.com/docgyver/unraid-v6-plugins/master/ssh.plg
plugin: downloading https://raw.githubusercontent.com/docgyver/unraid-v6-plugins/master/ssh.plg
plugin: downloading: https://raw.githubusercontent.com/docgyver/unraid-v6-plugins/master/ssh.plg ... done
plugin: run failed: /bin/bash retval: 1

 

Share this post


Link to post
On 8/1/2018 at 11:12 PM, deadnote said:

Hi

Fails to install on unRaid 6.5.3 for me.

 


plugin: installing: https://raw.githubusercontent.com/docgyver/unraid-v6-plugins/master/ssh.plg
plugin: downloading https://raw.githubusercontent.com/docgyver/unraid-v6-plugins/master/ssh.plg
plugin: downloading: https://raw.githubusercontent.com/docgyver/unraid-v6-plugins/master/ssh.plg ... done
plugin: run failed: /bin/bash retval: 1

 

installed fine for me however i cannot login with my user accounts and root gets disabled by default and on a fresh boot

Share this post


Link to post

Whenever I try to SSH into my Unraid with the Root account, I get a permission denied error. I have permit root login on yes, but i just can't login. A different User works fine with it though. I tried removing the Password and allow empty password, I set up a password. Nothing changes, i just can't get it work

Share this post


Link to post

Did you install both SSH and Denyhosts plugins?

Denyhosts default behavior is to block logins to root with only a single failure. You may need to whitelist your source IP.

I will wait to speculate further on the problem until after you confirm Denyhosts install or lack.

Share this post


Link to post

I didnt install denyhosts. But i figured out that apparently the ssh plugin doesn't update the config at boot/config/ssh/ssh_d . I manually added "PermitRootLogin yes" and restartet the ssh service. Then it worked

Share this post


Link to post

There is a big problem with this plugin's logic. User installs it, enables ssh, tries to login as root and gets banned. The only solution for those who do not want to delve into particulars of SSH is to delete /boot/config/ssh and reboot. 

Share this post


Link to post

Sorry you are having issues with the DenyHosts plugin. It is true that a failed login to root can cause even a local ban. I've thought about adding a "whitelist" for all private IP addresses to the default config but "the tyranny of the default" would put this in place for folks who might not want it.

I will look at the Readme.md and see if I can make potential impacts more clear and maybe as an option have an optional whitelist file that people can put in place.

Thanks for the feedback.

Share this post


Link to post
On 7/13/2019 at 6:35 PM, Barafu said:

There is a big problem with this plugin's logic. User installs it, enables ssh, tries to login as root and gets banned. The only solution for those who do not want to delve into particulars of SSH is to delete /boot/config/ssh and reboot. 

I agree, this plugin has a tendency to mess up your sshd_config entirely in no time. I would not recommend using it. Just one reboot and you'll know why; It locked me out many times, not because of the banning, but because it ruined ssh config. Had to go manually fix it with KVM access to the unRAID server. And then, looking at sshd_config showed all kinds of double entries.

It's better to populate the go script with copy commands and just create and maintain your own ssh config.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.