[Solved] User created in ISPConfig 3 can't login via SSH

Discussion in 'General' started by anark10n, Jan 23, 2018.

  1. anark10n

    anark10n Member

    Hey there
    So, i created a user in ISPConfig 3, gave them a site, but I am unable to log in with said user via ssh. The user is part of the sshuser group, but when I try logging in as the user, it just returns "Permission denied, please try again." What am I missing?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Which error do you get in Linux auth.log or syslog file? And how does the line for thts user in /etc/passwd looks like?
     
  3. anark10n

    anark10n Member

    auth.log just lists a lot of sessions opened and closed by user root, nothing for user web1; syslog has nothing relevant to user web1. Don't think i can post syslog as it contains client email addresses in it. Is there a command to retrieve only those relevant entries?
    As for the /etc/passwd line:
    Code:
    sshusers:x:5002:web1,web2,web3,web4,web5,web6,web7,web8,web9,web10,web11,web12,web13,web14,web15,web16
    
    Edit:
    Managed to get something from auth.log:
    Code:
    Jan 23 11:22:21 opensrvr01 sshd[6304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.182.18.227  user=web1
    Jan 23 11:22:23 opensrvr01 sshd[6304]: Failed password for web1 from 41.182.18.227 port 37926 ssh2
    Jan 23 11:22:26 opensrvr01 sshd[6304]: Failed password for web1 from 41.182.18.227 port 37926 ssh2
    Jan 23 11:22:27 opensrvr01 sshd[6304]: Failed password for web1 from 41.182.18.227 port 37926 ssh2
    
     
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Did you create a ssh user for that website? Web1 looks like the website user.
     
  5. anark10n

    anark10n Member

    Is this the Shell-User in the "Sites" section?
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Yes. The web1 user is not a user to connect to by SSH. You have to create a shell user in ISPConfig if you want to connect to a site by SSH.
     
  7. anark10n

    anark10n Member

    I see. In the Chroot Shell section, do i select none or jailkit?
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    If it's your own server and own website, then use none. If the ssh account is for a client, then better use jailkit.
     
  9. anark10n

    anark10n Member

    Okay, got it working. Much thanks.
     

Share This Page