Hello, Here are my specs: Ubuntu 14.04.4 LTS (64 bit) ISPConfig Version: 3.0.5.4p9 I have an issue: when I create shell users (no Jailkit, no RSA key), they get properly created in the /etc/passwd file and their home directory gets created too. i.e. if I have a website whose root is: Code: /var/www/clients/client1/web4 and whose associated user name is: "prefix" and create 2-3 users, I see: /etc/passwd Code: web4:x:5008:5005::/var/www/clients/client1/web4:/bin/false prefixuser1:x:5008:5005::/var/www/clients/client1/web4/home/prefixuser1:/bin/bash prefixuser2:x:5008:5005::/var/www/clients/client1/web4/home/prefixuser2:/bin/bash Created homes Code: /var/www/clients/client1/web4/home/prefixuser1 Code: /var/www/clients/client1/web4/home/prefixuser2 Code: /var/www/clients/client1/web4/home/prefixuser3 However if I try and SSH them in (using prefix before their name, as listed on ISPConfig), I always get "access denied". Searching the 'net I have read there would be some "enable logins" option to set in the website's preferences but, since the tutorial I have found is about an old ISPConfig version, I can't find such a switch in my screens. Any idea about what could be the issue? Best regards, Dario Fumagalli
There is no such option in ISPConfig 3. The setup of the SSH users looks fine in the passwd file, so the should work. Check the syslog file for the exact login error message.
Hello, syslog shows me FTP / mail / DNS operations but no SSH activity whatsoever. I get no log even for users I had created before installing ISPConfig and who may log on with no issue.
And nothing in the uath.log too? are you sure that you connect to the right server, maybe the ssh port is directed to another system?
I have found out I had an Allowusers clause in /etc/ssh/sshd_config. The affected user names were not added by ISPConfig (assuming it's supposed to do that, not sure), therefore they were force rejected. I have added them and now everything works well.
Hi - I know this is an old thread - but the info is still useful. I too got caught with a user created in ISPConfig3 getting refused. /var/log/auth.log was really handy - all the info I needed. My SSHD_Config file had AlllowedUsers and also I set the PasswordAuthentication as No If ISPConfig doesnt managed SSHD_config - where does it set info about SSH? How does SSH know to look in /var/www/clients/client<Number>/web<number>/home/<username>/.ssh/authorizedkeys file? I also suspect now I have PasswordAuthentication = no , that clients with no ssh key will get refused. I'll play with that later.
ISPConfig indeed does not manage sshd config as SSH users are in the file /etc/passwd and passwords are in /etc/shadow file. From /etc/passwd file. The folder /var/www/clients/client<Number>/web<number>/home/<username>/ is the home directory of the user and SSH always looks for a file .ssh/authorized_keys inside the home directory of the user. As the name of the config option suggests (PasswordAuthentication) its about password authentication and not key based authentication.
