I have changed the root password in the GUI, and I am able to login to the GUI with the new root password without a problem... but I am now unable to connect via SSH with the new root password, just says it's invalid... does anyone have any ideas how I can get access to the CLI now?

 

I have my regular user (and I created a test user), both of them can login with their respective passwords, but are immediately disconnected without being given a shell. 

 

Not really sure what to do at this point.

Edited October 26, 20178 yr by joshz

Make sure that you hit the <Enter> key after root user name.  Type very precisely with short key strokes so that you are sure that you are getting only one letter by keystroke. 

 

Are you using any symbols that aren't between the '1'  and '+' key on the top row of the keyboard?  (I am not sure if there are any unallowed symbols in either your SSH client or Linux.  Sometimes it is simply best not to get too cute in creating difficult-to-guess passwords.)

Hi Frank,

 

Thanks for getting back to me. The problem with root ended up being root login was turned off in the sshd config file for some reason. Turning it on solved that particular issue... but the problem with users still remains.

 

I can fix all these problems via the CLI, but the questions remain:

 

1. Why is unRaid preventing standard user logins from SSH

2. How to allow them via the GUI

 

I have no problem doing everything via the CLI if that's what's required (I've been a Linux system admin for 20+ years now), but I would rather use the GUI... not because I prefer it, but I don't want to get the unRaid configurations and settings out of sync with the OS, so I would prefer to let the unRaid interface handle whatever needs to be handled so all the various switches and levers get flipped when they should. 

 

I would like to turn off root logins from SSH and require user level logins and the SU as needed. I would, in fact, like to turn off passwords all together and use my U2F or Yubikey as my sole authentication mechanism for CLI access.

Only root has access to the command line. There is no reason for other users to have access to the command line. If you want a full Linux OS you can have unRAID host a VM for that.

Ok, fair enough. Do I need to manually set it up for private key authentication vs passwords, or is there a GUI switch for that?

 

 

No Gui switch.

But you can just edit the config file /etc/ssh/sshd_config and save it to /boot/config/ssh

Same with the public keys, keep them under /etc/ssh and make a copy /boot/config/ssh because the ssh server script copies everything from /boot/config/ssh to /etc/ssh when the service is started.