SSh using putty

[chengdj]

I upgraded an ESX 3.5 server to 4.1 using update manager. I have an ID is used for creating ssh session using putty to the host. It used to be working until I upgraded it to 4.1. 1) the id is in user and ssh group. ( I also added to adm group ). 2) I know ssh is running, because I can ssh into the host using root account. Question - what permission is required for this putty id to work to connect to host through ssh ? thanks

[piaroa]

Do you mean using a different user than root to log in via ssh to an ESXi ?

If this post has been helpful/solved your issue, please mark the thread and award points as you see fit. Thanks!

[chengdj]

yes.. using another id, instead of using root id. thanks

[piaroa]

Do this and you'll be able to:

http://www.yellow-bricks.com/2008/08/14/esxi-ssh-and-non-root-users/

If this post has been helpful/solved your issue, please mark the thread and award points as you see fit. Thanks!

[MentholMoose]

Being a member of the users group should be sufficient. Try creating a new user instead of trying to use the old one. Don't forget to use passwd set a password.

[chengdj]

nope.. I created a new user using useradd and reset the password. added to sshd /users group. It still telling me access denied. I noticed there are two group files, and two users files ( shadow and shadow.esx4, group, and group.esx4.... ). The user only can be added to shadow, not shadow.esx4. so.. Could this be the problem ?

thanks

[MentholMoose]

Try adding the user using the vSphere Client (connect directly to the host and use the Local Users & Groups tab). The user should only need to be in the users group. The sshd group is only for the SSH daemon. I don't know what those extra files are for, sorry.

---

Kirk Kosinski

VCP 4, MCITP: EA/VA/EDA7

[chengdj]

Matt: I tried both options. one from using vshpere client connecting to host and create it that way, One from ssh into the host using root id and adduser and passwd ... they both have same result. Access denied. Both option created the user in shadow file, not shadow.esx4 file. I was told that two files is because, I upgraded the esx host from 3.5 to 4.1 using update manager. that is why..

thanks

[MentholMoose]

Can you paste the output of +grep /etc/passwd+ where is the username of, um, your user? Also what is the exact error you get when you try to connect via putty using this user?

---

Kirk Kosinski

VCP 4, MCITP: EA/VA/EDA7

[AWo]

Please post your "/etc/ssh/sshd_config".

Make sure the firewall is configured to let ssh (port TCP/443) pass.

Do you use passwords or public/private key authentication?

AWo

VCP 3 & 4

\[:o]===\[o:]

=Would you like to have this posting as a ringtone on your cell phone?=

=Send "Posting" to 911 for only $999999,99!=

[chengdj]

I can putty into the host using root id, therefore, I know that sshd_config is working. I am not using any public /private key..

[chengdj]

it is in the pam.d/system.auth. The first line needs to be removed.

[MentholMoose]

it is in the pam.d/system.auth. The first line needs to be removed.

What do you mean? Did you resolve the problem?

---

Kirk Kosinski

VCP 4, MCITP: EA/VA/EDA7

[chengdj]

yes.. I called the vmware global support. They help me to resolve the issue. thanks all.. The key is the system-auth file. thanks all. I thought it would easier... guess not..

[AWo]

As far as I understood the first three posts putty works for root but not for other users, right?

Have you added the user you want to use to the "/etc/ssh/sshd_config", parameter "allowed_user"?

AWo

VCP 3 & 4

\[:o]===\[o:]

=Would you like to have this posting as a ringtone on your cell phone?=

=Send "Posting" to 911 for only $999999,99!=