[SOLVED]Bug: root cannot login via ssh on domain server anymore

UCS - Univention Corporate Server
#1

… but user can.

Yesterday updated to UCS 4.4-2 errata 298

/etc/ssh/sshd_config:

PermitRootLogin no

ssh -l root ip_number -vvv
…
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred: password
debug3: authmethod_is_enabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug3: send packet: type 50
debug2: we sent a keyboard-interactive packet, wait for reply
debug3: receive packet: type 60
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 1
Password:
debug3: send packet: type 61
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive
debug2: userauth_kbdint
debug3: send packet: type 50
debug2: we sent a keyboard-interactive packet, wait for reply
debug3: receive packet: type 60
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 1
Password:

checked with

run-parts /usr/lib/univention-directory-policy

without luck.
In all other ucs servers login is possible.

Any help is appreciate !

#2

the cause lies in the packe updates.

I restored the UCS domain controller from backup (2 days ago).
First upgraded to new release 4.4-2 errata298.
Then checked login with root without problems.
After installing package-updates, the user “root” is not been able to login !

Same release- and package-updates on the backup-domain- and other servers
were installed as well but without any problems to login as root.

#3

Sorry for other question:
How do you make a server backup?

#4

all servers are running in a VMware ESXi environment.
The backup procedure is realized with open source “ghettoVCB”.

#5

I changed the topic to “bug” because it´s a problem of the installing procedure from the package-updates.

Hope for a solution (incl. work-arounds :_) ) …

#6

solved with release 4.4-2 errata301

Mastodon