Debian 11 ISPConfig3 shell user can't login

Hello all, after upgrading a server from Debian 10 to Debian 11 users can't login via ssh (only jailed), if I check /var/log/auth.log I got this:

Code:

Aug 11 16:57:08 webserver-arc sshd[7081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=***.***.***.***  user=myshelluser
Aug 11 16:57:10 webserver-arc sshd[7081]: Failed password for myshelluser from ***.***.***.*** port 65271 ssh2
Aug 11 16:57:13 webserver-arc sshd[7081]: error: Received disconnect from ***.***.***.*** port 65271:13: User request [preauth]
Aug 11 16:57:13 webserver-arc sshd[7081]: Disconnected from authenticating user myshelluser ***.***.***.*** port 65271 [preauth]

I've already run ispconfig_update.sh --force and let it reconfigure all services but w/out any luck. any hint on what could be the issue?

 

Debian 11 does not allow root login remotely with password authentication. Use ssh keys, or first log in as ordinary user, then su - to root.
If that is not it, try ssh -vv when logging in to get more verbose output.
If you upgraded the OS, did you follow ISPConfig update instructions when the OS is updated?

 

Hello Taleman and thankyou for your reply.
Maybe I was not so clear exposing my problem, I mean that a jail user (created via ISPConfig) can't login, if the same user is not in jail mode, it can login w/out any issue, I can ssh via root user (it's a provider's Debian Image, only root user is created during OS installation, I can't change it ATM, for sure I can create a normal user and disable root login)

Yes, I've followed step by step both tutorials (the one on how to upgrade from Debian 10 to Debian 11 and the one How to upgrade ISPConfig from Debian 10 to Debian 11), all works well exept ssh for jailed-users.

 

You do not reveal what happens when logging in. Any error messages? Anything in logs? Did you try ssh -vv to get detailed output?

 

I've find the issue, jailkit was not installed after Debian 10 to Debian 11 upgrade, I've install it again and now it works.