I have also attempted to login to the console with tigervnc, and it
still won't let me log in. So it's not an SSH problem, it's a problem
with the user accounts
On Fri, Sep 6, 2024 at 10:57 PM Nathan Dehnel <ncdeh...@gmail.com> wrote:
>
> guix 36e30a3
>
> I am no longer able to log into the childhurd vm. My configuration
> worked previously and hasn't changed.
> (service hurd-vm-service-type
> (hurd-vm-configuration
> (os childhurd-os)
> (disk-size (* 8 (expt 2 30)))))
>
> (define childhurd-os
> ;; Definition of my GNU/Hurd system, derived from the default one.
> (operating-system
> (inherit %hurd-vm-operating-system)
>
> ;; Add a user account.
> (users (cons (user-account
> (name "nathan")
> (group "users")
> (password (crypt "password" "$6$abc"))
> (supplementary-groups '("wheel"))) ;for 'sudo'
> %base-user-accounts))
>
> (services
> (modify-services (operating-system-user-services
> %hurd-vm-operating-system)
> (openssh-service-type
> config => (openssh-configuration
> (inherit config)
> (permit-root-login #t)
> (password-authentication? #t)
> ))))))
>
> $ ssh nathan@localhost -vvvvvv -p 10022
> OpenSSH_9.8p1, OpenSSL 3.0.8 7 Feb 2023
> debug1: Reading configuration data /home/nathan/.ssh/config
> debug2: resolve_addr: could not resolve name localhost as address:
> Name or service not known
> debug3: resolve_canonicalize: attempting "localhost" =>
> "localhost.dehnel.info."
> debug3: resolve_host: lookup localhost.dehnel.info.:10022
> debug1: Canonicalized hostname "localhost" => "localhost.dehnel.info"
> debug1: hostname canonicalisation enabled, will re-parse configuration
> debug1: re-parsing configuration
> debug1: Reading configuration data /home/nathan/.ssh/config
> debug2: add_identity_file: ignoring duplicate key
> /home/nathan/.ssh/nathan-user-key
> debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' ->
> '/home/nathan/.ssh/known_hosts'
> debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' ->
> '/home/nathan/.ssh/known_hosts2'
> debug3: channel_clear_timeouts: clearing
> debug3: ssh_connect_direct: entering
> debug1: Connecting to localhost.dehnel.info [::1] port 10022.
> debug3: set_sock_tos: set socket 3 IPV6_TCLASS 0x48
> debug1: connect to address ::1 port 10022: Connection refused
> debug1: Connecting to localhost.dehnel.info [127.0.0.1] port 10022.
> debug3: set_sock_tos: set socket 3 IP_TOS 0x48
> debug1: Connection established.
> debug1: identity file /home/nathan/.ssh/nathan-user-key type 0
> debug1: identity file /home/nathan/.ssh/nathan-user-key-cert type 4
> debug1: Local version string SSH-2.0-OpenSSH_9.8
> debug1: Remote protocol version 2.0, remote software version OpenSSH_9.8
> debug1: compat_banner: match: OpenSSH_9.8 pat OpenSSH* compat 0x04000000
> debug2: fd 3 setting O_NONBLOCK
> debug1: Authenticating to localhost.dehnel.info:10022 as 'nathan'
> debug3: put_host_port: [localhost.dehnel.info]:10022
> debug3: record_hostkey: found key type ED25519 in file
> /home/nathan/.ssh/known_hosts:14
> debug3: record_hostkey: found key type RSA in file
> /home/nathan/.ssh/known_hosts:15
> debug3: record_hostkey: found key type ECDSA in file
> /home/nathan/.ssh/known_hosts:16
> debug3: load_hostkeys_file: loaded 3 keys from [localhost.dehnel.info]:10022
> debug1: load_hostkeys: fopen /home/nathan/.ssh/known_hosts2: No such
> file or directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or
> directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file
> or directory
> debug3: order_hostkeyalgs: have matching best-preference key type
> ssh-ed25519-cert-...@openssh.com, using HostkeyAlgorithms verbatim
> debug3: send packet: type 20
> debug1: SSH2_MSG_KEXINIT sent
> debug3: receive packet: type 20
> debug1: SSH2_MSG_KEXINIT received
> debug2: local client KEXINIT proposal
> debug2: KEX algorithms:
> sntrup761x25519-sha...@openssh.com,curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-ni
> stp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-
> c-...@openssh.com
> debug2: host key algorithms:
> ssh-ed25519-cert-...@openssh.com,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384-cert-...@openssh.com,ecdsa-sha2-n
> istp521-cert-...@openssh.com,sk-ssh-ed25519-cert-...@openssh.com,sk-ecdsa-sha2-nistp256-cert-...@openssh.com,rsa-sha2-512-cert-...@openssh.com,rsa-sha2-256-
> cert-...@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25...@openssh.com,sk-ecdsa-sha2-nistp...@openssh.com,r
> sa-sha2-512,rsa-sha2-256
> debug2: ciphers ctos:
> chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
> debug2: ciphers stoc:
> chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
> debug2: MACs ctos:
> umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,um
> ac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: MACs stoc:
> umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,um
> ac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: compression ctos: none,z...@openssh.com,zlib
> debug2: compression stoc: none,z...@openssh.com,zlib
> debug2: languages ctos:
> debug2: languages stoc:
> debug2: first_kex_follows 0
> debug2: reserved 0
> debug2: peer server KEXINIT proposal
> debug2: KEX algorithms:
> sntrup761x25519-sha...@openssh.com,curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-ni
> stp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-s,kex-strict-
> s-...@openssh.com
> debug2: host key algorithms:
> rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
> debug2: ciphers ctos:
> chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
> debug2: ciphers stoc:
> chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
> debug2: MACs ctos:
> umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,um
> ac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: MACs stoc:
> umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,um
> ac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: compression ctos: none,z...@openssh.com
> debug2: compression stoc: none,z...@openssh.com
> debug2: languages ctos:
> debug2: languages stoc:
> debug2: first_kex_follows 0
> debug2: reserved 0
> debug3: kex_choose_conf: will use strict KEX ordering
> debug1: kex: algorithm: sntrup761x25519-sha...@openssh.com
> debug1: kex: host key algorithm: ssh-ed25519
> debug1: kex: server->client cipher: chacha20-poly1...@openssh.com MAC:
> <implicit> compression: none
> debug1: kex: client->server cipher: chacha20-poly1...@openssh.com MAC:
> <implicit> compression: none
> debug3: send packet: type 30
> debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
> debug3: receive packet: type 31
> debug1: SSH2_MSG_KEX_ECDH_REPLY received
> debug1: Server host key: ssh-ed25519
> SHA256:bEUuS3M3HkcKcTvcFe1sta6MJn3L+onAbDbqnchx7v4
> debug3: put_host_port: [127.0.0.1]:10022
> debug3: put_host_port: [localhost.dehnel.info]:10022
> debug3: record_hostkey: found key type ED25519 in file
> /home/nathan/.ssh/known_hosts:14
> debug3: record_hostkey: found key type RSA in file
> /home/nathan/.ssh/known_hosts:15
> debug3: record_hostkey: found key type ECDSA in file
> /home/nathan/.ssh/known_hosts:16
> debug3: load_hostkeys_file: loaded 3 keys from [localhost.dehnel.info]:10022
> debug1: load_hostkeys: fopen /home/nathan/.ssh/known_hosts2: No such
> file or directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or
> directory
> debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file
> or directory
> debug1: Host '[localhost.dehnel.info]:10022' is known and matches the
> ED25519 host key.
> debug1: Found key in /home/nathan/.ssh/known_hosts:14
> debug3: send packet: type 21
> debug1: ssh_packet_send2_wrapped: resetting send seqnr 3
> debug2: ssh_set_newkeys: mode 1
> debug1: rekey out after 134217728 blocks
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: Sending SSH2_MSG_EXT_INFO
> debug3: send packet: type 7
> debug1: expecting SSH2_MSG_NEWKEYS
> debug3: receive packet: type 21
> debug1: ssh_packet_read_poll2: resetting read seqnr 3
> debug1: SSH2_MSG_NEWKEYS received
> debug2: ssh_set_newkeys: mode 0
> debug1: rekey in after 134217728 blocks
> debug2: KEX algorithms:
> sntrup761x25519-sha...@openssh.com,curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-ni
> stp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-
> c-...@openssh.com
> debug2: host key algorithms:
> ssh-ed25519-cert-...@openssh.com,ecdsa-sha2-nistp256-cert-...@openssh.com,ecdsa-sha2-nistp384-cert-...@openssh.com,ecdsa-sha2-n
> istp521-cert-...@openssh.com,sk-ssh-ed25519-cert-...@openssh.com,sk-ecdsa-sha2-nistp256-cert-...@openssh.com,rsa-sha2-512-cert-...@openssh.com,rsa-sha2-256-
> cert-...@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25...@openssh.com,sk-ecdsa-sha2-nistp...@openssh.com,r
> sa-sha2-512,rsa-sha2-256
> debug2: ciphers ctos:
> chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
> debug2: ciphers stoc:
> chacha20-poly1...@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-...@openssh.com,aes256-...@openssh.com
> debug2: MACs ctos:
> umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,um
> ac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: MACs stoc:
> umac-64-...@openssh.com,umac-128-...@openssh.com,hmac-sha2-256-...@openssh.com,hmac-sha2-512-...@openssh.com,hmac-sha1-...@openssh.com,um
> ac...@openssh.com,umac-...@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
> debug2: compression ctos: none,z...@openssh.com,zlib
> debug2: compression stoc: none,z...@openssh.com,zlib
> debug2: languages ctos:
> debug2: languages stoc:
> debug2: first_kex_follows 0
> debug2: reserved 0
> debug3: send packet: type 5
> debug3: receive packet: type 7
> debug1: SSH2_MSG_EXT_INFO received
> debug3: kex_input_ext_info: extension server-sig-algs
> debug1: kex_ext_info_client_parse:
> server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25...@openssh.com,sk-ec
> dsa-sha2-nistp...@openssh.com,rsa-sha2-512,rsa-sha2-256>
> debug3: kex_input_ext_info: extension publickey-hostbo...@openssh.com
> debug1: kex_ext_info_check_ver: publickey-hostbo...@openssh.com=<0>
> debug3: kex_input_ext_info: extension p...@openssh.com
> debug1: kex_ext_info_check_ver: p...@openssh.com=<0>
> debug3: receive packet: type 6
> debug2: service_accept: ssh-userauth
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug3: send packet: type 50
> debug3: receive packet: type 7
> debug1: SSH2_MSG_EXT_INFO received
> debug3: kex_input_ext_info: extension server-sig-algs
> debug1: kex_ext_info_client_parse:
> server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25...@openssh.com,sk-ec
> dsa-sha2-nistp...@openssh.com,rsa-sha2-512,rsa-sha2-256>
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> debug3: start over, passed a different list publickey,password
> debug3: preferred publickey,keyboard-interactive,password
> debug3: authmethod_lookup publickey
> debug3: remaining preferred: keyboard-interactive,password
> debug3: authmethod_is_enabled publickey
> debug1: Next authentication method: publickey
> debug1: Will attempt key: /home/nathan/.ssh/nathan-user-key RSA
> SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug1: Will attempt key: /home/nathan/.ssh/nathan-user-key RSA-CERT
> SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug2: pubkey_prepare: done
> debug1: Offering public key: /home/nathan/.ssh/nathan-user-key RSA
> SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug3: send packet: type 50
> debug2: we sent a publickey packet, wait for reply
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> debug1: Offering public key: /home/nathan/.ssh/nathan-user-key
> RSA-CERT SHA256:pip/Y5F5Y4cIhLrAiO43Qeglq8o6EPCepCE9eHGzCiA explicit
> debug3: send packet: type 50
> debug2: we sent a publickey packet, wait for reply
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> debug2: we did not send a packet, disable method
> debug3: authmethod_lookup password
> debug3: remaining preferred: ,password
> debug3: authmethod_is_enabled password
> debug1: Next authentication method: password
> nat...@localhost.dehnel.info's password:
> debug3: send packet: type 50
> debug2: we sent a password packet, wait for reply
> debug3: receive packet: type 51
> debug1: Authentications that can continue: publickey,password
> Permission denied, please try again.
> nat...@localhost.dehnel.info's password:
