action #93829
closed[qe-core] default config does not permit password-login for root over ssh
100%
Description
As a consequence to fixing https://bugzilla.opensuse.org/show_bug.cgi?id=1173067, openssh now no longer allows RootLogin using password auth on Tumbleweed (and thus also future SLE products inheriting the package from Factory)
We need to rework our tests to either:
- ssh login as root, and become superuser as needed
- reconfigure the ssh daemon to permit root login when really needed (e.g. scp cases)
To allow root to login using password, the simplest way is:
echo "PermitRootLogin yes" > /etc/ssh/sshd_config.d/root.conf && rcsshd restart
on the sshd host
Updated by dimstar almost 3 years ago
- Related to action #93832: [Tumbleweed][security]tls_389ds_sssd_client: ssh login for root denied added
Updated by dimstar almost 3 years ago
- Related to action #93835: [Tumbleweed][security]swtpm_verify: ssh login as root not permitted added
Updated by dimstar almost 3 years ago
- Related to action #93847: [qe-core]ovs_client: ssh login for root denied added
Updated by AdaLovelace almost 3 years ago
The test reconnect_mgmt_console is failing because of the same issue: https://progress.opensuse.org/issues/93949
Updated by AdaLovelace almost 3 years ago
- Related to action #93949: [Tumbleweed][s390x] test fails in reconnect_mgmt_console because passwords are forbidden added
Updated by okurz over 2 years ago
- Subject changed from default config does not permit password-login for root over ssh to [qe-core] default config does not permit password-login for root over ssh
- Status changed from New to Blocked
- Assignee set to szarate
Updated by slo-gin over 1 year ago
This ticket was set to Normal priority but was not updated within the SLO period. Please consider picking up this ticket or just set the ticket to the next lower priority.
Updated by szarate over 1 year ago
- Status changed from Blocked to Resolved
Closing, thanks Dimstar for bringing it up :D https://suse.slack.com/archives/C02CANHLANP/p1669730215218819