Re: Connection refused to Guix-hosted SSH

[address@hidden]

On Thu, Oct 13, 2022 at 11:05 PM Felix Lechner
<felix.lechner@lease-up.com> wrote:
>
> Hi,

Hi Felix

> On Wed, Oct 12, 2022 at 1:33 PM dabbede@gmail.com <dabbede@gmail.com> wrote:
> >
> > I can't login with private credentials.
>
> Did you set a password interactively? Otherwise you can set an initial
> password with something like (password (crypt "alice" "$6$abc")) [1]

Password was set interactively. Now I've added a third user "test"
with a prescribed/crypted password and I can login to it from terminal
but, again, not from ssh client.

> Either way, I would also have a look at the output of
>
>     fgrep -i ssh /var/log/messages
>
> on the server.

Sure. I receive a bunch of messages of this form:

Oct 14 10:04:23 localhost vmunix: [ 5869.880044] audit: type=1326
audit(1665734663.369:6): auid=4294967295 uid=989 gid=983
ses=4294967295 subj=unconfined pid=599 comm="sshd"
exe="/gnu/store/jgw64z5w2q6b4nph7a74jc97ihfxkfsf-openssh-8.9p1/sbin/sshd"
sig=31 arch=40000003 syscall=414 compat=0 ip=0xb7f94549 code=0x0
Oct 14 10:04:23 localhost shepherd[1]: 0 connections still in use
after sshd-5 termination.
Oct 14 10:04:23 localhost shepherd[1]: Service sshd-5 (PID 598) exited with 255.
Oct 14 10:04:23 localhost shepherd[1]: Service sshd-5 has been disabled.
Oct 14 10:04:23 localhost shepherd[1]: Transient service sshd-5
terminated, now unregistered.
Oct 14 10:05:43 localhost shepherd[1]: Service sshd-6 has been started.
Oct 14 10:05:43 localhost vmunix: [ 5950.061859] audit: type=1326
audit(1665734743.553:7): auid=4294967295 uid=989 gid=983
ses=4294967295 subj=unconfined pid=601 comm="sshd"
exe="/gnu/store/jgw64z5w2q6b4nph7a74jc97ihfxkfsf-openssh-8.9p1/sbin/sshd"
sig=31 arch=40000003 syscall=414 compat=0 ip=0xb7fba549 code=0x0
Oct 14 10:05:43 localhost shepherd[1]: 0 connections still in use
after sshd-6 termination.
Oct 14 10:05:43 localhost shepherd[1]: Service sshd-6 (PID 600) exited with 255.
Oct 14 10:05:43 localhost shepherd[1]: Service sshd-6 has been disabled.
Oct 14 10:05:43 localhost shepherd[1]: Transient service sshd-6
terminated, now unregistered.

I see "Service sshd-6 (PID 600) exited with 255." but I don't know
what it means nor why.
In order to gain more insight I've tried to connect with verbose
output "ssh -v test@localhost" and this is the output

OpenSSH_8.9p1, OpenSSL 1.1.1q  5 Jul 2022
debug1: Connecting to localhost [127.0.0.1] port 22.
debug1: Connection established.
debug1: identity file /home/pcp/.ssh/id_rsa type 0
debug1: identity file /home/pcp/.ssh/id_rsa-cert type -1
debug1: identity file /home/pcp/.ssh/id_ecdsa type -1
debug1: identity file /home/pcp/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/pcp/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/pcp/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/pcp/.ssh/id_ed25519 type -1
debug1: identity file /home/pcp/.ssh/id_ed25519-cert type -1
debug1: identity file /home/pcp/.ssh/id_ed25519_sk type -1
debug1: identity file /home/pcp/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/pcp/.ssh/id_xmss type -1
debug1: identity file /home/pcp/.ssh/id_xmss-cert type -1
debug1: identity file /home/pcp/.ssh/id_dsa type -1
debug1: identity file /home/pcp/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_8.9
debug1: compat_banner: match: OpenSSH_8.9 pat OpenSSH* compat 0x04000000
debug1: Authenticating to localhost:22 as 'test'
debug1: load_hostkeys: fopen /home/pcp/.ssh/known_hosts: No such file
or directory
debug1: load_hostkeys: fopen /home/pcp/.ssh/known_hosts2: No such file
or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file
or directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC:
<implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC:
<implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Connection reset by 127.0.0.1 port 22

The lines about missing known_hosts were suspicious, but even touching
a new .ssh/knwon_hosts does not help.
The line with "expecting SSH2_MSG_KEX_ECDH_REPLY" is also suspicious
but I don't know how to solve it.

Finally, I also tried to manually start sshd on port 2222 and this is the output
/etc/ssh/sshd_config: No such file or directory

I don't know if shepherd has a different way of launching the daemon.
I expect that a sshd_config must exist somewhere... I would really
like to give a look at it

> Kind regards
> Felix Lechner
>
> [1] 
> https://guix.gnu.org/en/manual/devel/en/html_node/Using-the-Configuration-System.html

Thank you, regards