Unable to login via SSH for VCF Operations for Networks using support and consoleuser.

Products

• VCF Operations for Networks

Issue/Introduction

Unable to login via SSH to both platform and collector for both support and consoleuser, however console login works for both support and consoleuser.

Environment

VCF Operations for Networks

Cause

Changes made to the ssdd_config file under /etc/ssh/ will result in SSH security not allowing via SSH logins.

The following logs can be seen in auth.log under /var/log/arkin

 

Resolution

Review changes made in ssd_config file and make the changes as per the default settings below:

# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
UseDNS no
GSSAPIAuthentication no

AllowUsers consoleuser
AllowUsers support
DenyUsers ubuntu

Post making the changes restart the sshd daemon service by running the command below

sudo systemctl restart sshd.service