SSH connection failed on Linux Linaro ubuntu image.

[Botao]

On TI Panda 4430, 4460 and Samsung Arndale board with Linux Linaro ubuntu image:

http://snapshots.linaro.org/ubuntu/pre-built/panda/651/panda-trusty_developer_20140522-651.img.gz

SSH connection failed with "root" account.

Procedures:

root@linaro-developer:~# apt-get install ssh
root@linaro-developer:~# passwd
Type new password.

root@linaro-developer:~# ifconfig eth0
eth0 Link encap:Ethernet HWaddr ea:a7:8c:73:a9:e5
          inet addr:192.168.1.7 Bcast:192.168.1.255 Mask:255.255.255.0
          inet6 addr: fe80::e8a7:8cff:fe73:a9e5/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:2288 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3425 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1014872 (1.0 MB) TX bytes:3870579 (3.8 MB)

root@linaro-developer:~#

On host PC, run:
$ ssh root@192.168.1.7
The authenticity of host '192.168.1.7 (192.168.1.7)' can't be established.
ECDSA key fingerprint is cf:84:61:7e:5d:58:41:9d:74:79:ca:a0:2e:9c:9f:a2.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.1.7' (ECDSA) to the list of known hosts.
root@192.168.1.7's password:
Permission denied, please try again.
root@192.168.1.7's password:

The password typed is correct, but connection failed.

However, if using "linaro" account, everything just works well.

###########################################
This issue is observed on following images:
TI Panda:
http://snapshots.linaro.org/ubuntu/pre-built/panda/651/panda-trusty_developer_20140522-651.img.gz

Samsung Arndale:
http://snapshots.linaro.org/ubuntu/pre-built/arndale/654/arndale-trusty_server_20140525-654.img.gz

[Milosz Wasilewski (mwasilew)]

Botao,
It seems that the problem is related to SSH configuration (as you're able to connect to non-root account). I'll try to check that.

[Milosz Wasilewski (mwasilew)]

Just checked and it is surely configuration issue. I was able to login as root using ssh cert with default config. Changing 'PermitRootLogin yes' and setting root password also solves the case. Closing as invalid.

[Botao (botao-sun)]

Yes, it's a setting change, though not sure it's a bug or a fix. Because according to the OpenSSH manual page:

http://www.openssh.com/cgi-bin/man.cgi?query=sshd_config

The default option in /etc/ssh/sshd_config for PermitRootLogin is yes, and in our settings it's without-password.

After a little bit more search, I found this description regarding to it:

https://launchpad.net/ubuntu/trusty/+source/openssh/1:6.6p1-1

In Changelog it says:

 * Change to "PermitRootLogin without-password" for new installations, and ask a debconf question when upgrading systems with "PermitRootLogin yes" from previous versions (closes: #298138).

Looks like it's a update / fix.