无法sshd
在 Debian 10“Buster”中连接,连接时出现如下错误:
$ ssh -p 2222 [email protected]
ssh_exchange_identification: read: Connection reset by peer
检查这些服务,出现以下错误:
● sshd.service - OpenBSD Secure Shell server
Loaded: loaded (/etc/systemd/system/sshd.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2019-10-22 18:10:51 -03; 13min ago
Process: 559 ExecStartPre=/usr/sbin/sshd -t (code=exited, status=0/SUCCESS)
Main PID: 606 (sshd)
Tasks: 1 (limit: 2304)
Memory: 2.3M
CGroup: /system.slice/sshd.service
└─606 /usr/sbin/sshd -D
Oct 22 18:10:50 ffurtpc systemd[1]: Starting OpenBSD Secure Shell server...
Oct 22 18:10:51 ffurtpc sshd[606]: Server listening on 0.0.0.0 port 22.
Oct 22 18:10:51 ffurtpc sshd[606]: error: Bind to port 22 on :: failed: Address already in use.
Oct 22 18:10:51 ffurtpc systemd[1]: Started OpenBSD Secure Shell server.
Oct 22 18:14:26 ffurtpc sshd[1514]: Connection closed by authenticating user friedrich 192.168.12.73 port 49880 [preauth]
Oct 22 18:23:45 ffurtpc sshd[1583]: fatal: Missing privilege separation directory: /run/sshd
已经尝试使用xinetd
包来管理它,将其设置为端口 2222,而 OpenBSD Secure Shell 服务器保持监听端口 22,如下所示:
● xinetd.service - LSB: Starts or stops the xinetd daemon.
Loaded: loaded (/etc/init.d/xinetd; generated)
Active: active (running) since Tue 2019-10-22 18:10:55 -03; 15min ago
Docs: man:systemd-sysv-generator(8)
Process: 722 ExecStart=/etc/init.d/xinetd start (code=exited, status=0/SUCCESS)
Tasks: 1 (limit: 2304)
Memory: 4.5M
CGroup: /system.slice/xinetd.service
└─755 /usr/sbin/xinetd -pidfile /run/xinetd.pid -stayalive -inetd_compat -inetd_ipv6
Oct 22 18:10:56 ffurtpc xinetd[755]: Reading included configuration file: /etc/xinetd.d/echo-udp [file=/etc/xinetd.d/echo-udp] [line=26]
Oct 22 18:10:56 ffurtpc xinetd[755]: Reading included configuration file: /etc/xinetd.d/servers [file=/etc/xinetd.d/servers] [line=14]
Oct 22 18:10:56 ffurtpc xinetd[755]: Reading included configuration file: /etc/xinetd.d/services [file=/etc/xinetd.d/services] [line=13]
Oct 22 18:10:56 ffurtpc xinetd[755]: Reading included configuration file: /etc/xinetd.d/sshd [file=/etc/xinetd.d/sshd] [line=13]
Oct 22 18:10:56 ffurtpc xinetd[755]: Reading included configuration file: /etc/xinetd.d/time [file=/etc/xinetd.d/time] [line=16]
Oct 22 18:10:56 ffurtpc xinetd[755]: Reading included configuration file: /etc/xinetd.d/time-udp [file=/etc/xinetd.d/time-udp] [line=28]
Oct 22 18:10:56 ffurtpc xinetd[755]: 2.3.15.3 started with libwrap loadavg labeled-networking options compiled in.
Oct 22 18:10:56 ffurtpc xinetd[755]: Started working: 1 available service
Oct 22 18:14:22 ffurtpc sshd[1512]: Connection closed by authenticating user friedrich 192.168.12.73 port 35954 [preauth]
Oct 22 18:23:43 ffurtpc sshd[1582]: fatal: Missing privilege separation directory: /run/sshd
有任何想法吗?
答案1
这里有类似的错误,看起来启动时sshd
无法创建/run/sshd
目录,所以在这里通过脚本来完成它,如下所示:
在 中创建sshddir
包含以下内容的脚本/etc/init.d/
:
#!/bin/sh
### BEGIN INIT INFO
# Provides: sshddir
# Required-Start: $all
# Required-Stop: $network
# Should-Start: $network
# Default-Start: 3 4 5
# Default-Stop: 0 1 2 6
# Short-Description: Sshd /run/sshd Directory
# Description: Intended to create /run/sshd directory for Sshd.
### END INIT INFO
mkdir -p /run/sshd
chmod -R 755 /run/sshd
$ sudo chmod 755 /etc/init.d/sshddir
$ sudo update-rc.d sshddir defaults
这样,就可以重新启动并访问它。
答案2
只需创建包含以下内容的sshddir.service
文件/etc/system/systemd/
:
[Unit]
Description=Run Sshd Directory Creator
After=network.target auditd.service
ConditionPathExists=!/etc/ssh/sshd_not_to_be_run
[Service]
ExecStart=/usr/bin/sshddir
ExecReload=/usr/bin/sshddir
Restart=always
RestartPreventExitStatus=255
Type=forking
[Install]
WantedBy=multi-user.target
Alias=sshddir.service
然后:
2a-$ sudo systemctl daemon-reload
2b-$ sudo systemctl enable sshddir
但需要首先删除SysVinit
托管文件:
1a-$ update-rc.d sshddir disable
1b-$ update-rc.d sshddir remove
然后,重新启动机器。
看起来像是在启动时以某种方式systemd
删除了文件夹,从而产生错误。/run/sshd