☰

SSH 在启动时崩溃

tag-icon • tag-icon ssh vps upstart
SSH 在启动时崩溃

我与 VPS 的 ssh 连接不再起作用，我检查了 auth.log 文件并发现了以下内容：

认证日志

Jul 28 20:22:04 warp sshd[31257]: Accepted password for root from MY_IP port 49196 ssh2
Jul 28 20:23:01 warp CRON[31385]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:23:01 warp CRON[31385]: pam_unix(cron:session): session closed for user root
Jul 28 20:23:26 warp sshd[31411]: error: rexec of /usr/sbin/sshd failed: No such file or directory
Jul 28 20:23:28 warp sshd[31411]: Accepted password for root from MY_IP port 49229 ssh2
Jul 28 20:24:01 warp CRON[31473]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:24:01 warp CRON[31473]: pam_unix(cron:session): session closed for user root
Jul 28 20:25:01 warp CRON[31584]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:25:01 warp CRON[31585]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:25:01 warp CRON[31584]: pam_unix(cron:session): session closed for user root
Jul 28 20:25:01 warp CRON[31586]: pam_unix(cron:session): session opened for user munin by (uid=0)
Jul 28 20:25:01 warp CRON[31585]: pam_unix(cron:session): session closed for user root
Jul 28 20:25:01 warp CRON[31586]: pam_unix(cron:session): session closed for user munin
Jul 28 20:26:01 warp CRON[31680]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:26:01 warp CRON[31680]: pam_unix(cron:session): session closed for user root
Jul 28 20:27:01 warp CRON[31724]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:27:01 warp CRON[31724]: pam_unix(cron:session): session closed for user root
Jul 28 20:28:01 warp CRON[31883]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 28 20:28:01 warp CRON[31883]: pam_unix(cron:session): session closed for user root
Jul 28 20:28:08 warp sshd[31886]: error: rexec of /usr/sbin/sshd failed: No such file or directory
Jul 28 20:28:12 warp sshd[31886]: Invalid user ssh root from MY_IP 
Jul 28 20:28:12 warp sshd[31886]: input_userauth_request: invalid user ssh root [preauth]
Jul 28 20:28:16 warp sshd[31886]: error: Could not get shadow information for NOUSER
Jul 28 20:28:16 warp sshd[31886]: Failed password for invalid user ssh root from MY_IP  port 50247 ssh2
Jul 28 20:28:19 warp sshd[31886]: Failed password for invalid user ssh root from MY_IP  port 50247 ssh2
Jul 28 20:28:24 warp sshd[31886]: Failed password for invalid user ssh root from MY_IP  port 50247 ssh2
Jul 28 20:28:26 warp sshd[31886]: Connection closed by MY_IP  [preauth]
Jul 28 20:28:26 warp sshd[31893]: error: rexec of /usr/sbin/sshd failed: No such file or directory
Jul 28 20:28:28 warp sshd[31893]: Invalid user ssh root from MY_IP 
Jul 28 20:28:28 warp sshd[31893]: input_userauth_request: invalid user ssh root [preauth]
Jul 28 20:28:28 warp sshd[31893]: Failed none for invalid user ssh root from MY_IP  port 50249 ssh2

这是我的服务器的最后日志。好像我最后一次连接是在 2 个月前 7 月 28 日 20:22:04。几分钟后我又尝试了一下，但因为出现问题“/usr/bin/sshd 中没有这样的文件或目录”而失败

答案1

那么...该文件还存在吗？如果存在，则可能是它的一个或多个共享库丢失了（令人烦恼的是，execve() 会针对“二进制文件丢失”和“共享库丢失”产生相同的错误），您可以使用 进行检查ldd /usr/sbin/sshd。

有可能，有人破坏了操作系统，或者文件系统的关键部分发生了灾难性故障。无论哪种情况，您都可能即将发现您的备份到底是好是坏。

相关内容