From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.7 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.4 Received: from tb-ob1.topicbox.com (tb-ob1.topicbox.com [64.147.108.173]) by inbox.vuxu.org (Postfix) with ESMTP id 8607E21441 for ; Tue, 5 Nov 2024 20:32:25 +0100 (CET) Received: from tb-mx0.topicbox.com (tb-mx0.nyi.icgroup.com [10.90.30.73]) by tb-ob1.topicbox.com (Postfix) with ESMTP id 273E72D9FE for ; Tue, 5 Nov 2024 14:32:25 -0500 (EST) (envelope-from bounce.mM21e2c46d29da722aba7fb8e6.r81958daa-7202-11ef-bbf2-18142b2d11b0@illumos.bounce.topicbox.com) Received: by tb-mx0.topicbox.com (Postfix, from userid 1132) id 236841C5D63; Tue, 5 Nov 2024 14:32:25 -0500 (EST) ARC-Authentication-Results: i=2; topicbox.com; arc=pass; dkim=pass (2048-bit rsa key sha256) header.d=fastmail.fm header.i=@fastmail.fm header.b=ly2MZq9E header.a=rsa-sha256 header.s=fm3 x-bits=2048; dkim=pass (2048-bit rsa key sha256) header.d=messagingengine.com header.i=@messagingengine.com header.b=Uwr/udsP header.a=rsa-sha256 header.s=fm3 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=none,d=none,d.eval=none) policy.policy-from=p header.from=fastmail.fm; spf=pass smtp.mailfrom=gary_mills@fastmail.fm smtp.helo=fout-a5-smtp.messagingengine.com; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (message has been altered)) (Message modified while forwarding at Topicbox) ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=date:from:to:message-id:mime-version :content-type:list-help:list-id:list-post:list-subscribe :reply-to:subject:content-transfer-encoding:list-unsubscribe; s= sysmsg-1; t=1730835145; bh=mUkKlhmO+61fhbaa+S1UEWHoVUZT9rKlOf6N0 gwF83s=; b=dVLYCN5GkDH9sHZMRV9ufrUO6gaxaVnzpuVhMRIMBvV7niq2BeBNA zT+byKJSi8efR/qMJQQvMYNToKDMkPHlwG6ZoQEiZGxXuQh6BdgNTpNT6cxWyFck BFlhzGY95qu0ctXJJXg7PHOUlK1wnGmRjT6hKDq/X9q818euY+r3/g= ARC-Seal: i=2; a=rsa-sha256; cv=pass; d=topicbox.com; s=sysmsg-1; t= 1730835145; b=lIE0Clb2HYkORWpcHeD1HSh+sqMp1ztdbEgd2Yh/Ap9bxfH4Lh nZCedj61XaBMhXpw0319nMY45cL6KGh5W1ipirEuKBbMLMnAKTaJYDSVO4hpSiCg eQks56PAscYr+4nx/DCwB48iamx9T1Sw4gVkK7SodZhUGEF7S3EwEw6o8= Authentication-Results: topicbox.com; arc=pass; dkim=pass (2048-bit rsa key sha256) header.d=fastmail.fm header.i=@fastmail.fm header.b=ly2MZq9E header.a=rsa-sha256 header.s=fm3 x-bits=2048; dkim=pass (2048-bit rsa key sha256) header.d=messagingengine.com header.i=@messagingengine.com header.b=Uwr/udsP header.a=rsa-sha256 header.s=fm3 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=none,d=none,d.eval=none) policy.policy-from=p header.from=fastmail.fm; spf=pass smtp.mailfrom=gary_mills@fastmail.fm smtp.helo=fout-a5-smtp.messagingengine.com; x-internal-arc=fail (as.1.topicbox.com=pass, ams.1.topicbox.com=fail (message has been altered)) (Message modified while forwarding at Topicbox) X-Received-Authentication-Results: tb-mx1.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC Policy is not at enforcement); dkim=pass (2048-bit rsa key sha256) header.d=fastmail.fm header.i=@fastmail.fm header.b=ly2MZq9E header.a=rsa-sha256 header.s=fm3 x-bits=2048; dkim=pass (2048-bit rsa key sha256) header.d=messagingengine.com header.i=@messagingengine.com header.b=Uwr/udsP header.a=rsa-sha256 header.s=fm3 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=none,d=none,d.eval=none) policy.policy-from=p header.from=fastmail.fm; iprev=pass smtp.remote-ip=103.168.172.148 (fout-a5-smtp.messagingengine.com); spf=pass smtp.mailfrom=gary_mills@fastmail.fm smtp.helo=fout-a5-smtp.messagingengine.com; x-aligned-from=pass (Address match); x-me-sender=pass policy.xms= VXIqZ6qg16kLT1-BN6vzrewhN7O9jr5pd3EuVNJru52hkSANEQqDAkk9TbPP9Ms0RbwZGzr46_HN8RhN6sqbmiG1QrHk8AvodooEwzd-59iJJYjeOQaCMIL17YSc5j8WWkyOg4HCtpEYWqM; x-ptr=pass smtp.helo=fout-a5-smtp.messagingengine.com policy.ptr=fout-a5-smtp.messagingengine.com; x-return-mx=pass header.domain=fastmail.fm policy.is_org=yes (MX Records found: in1-smtp.messagingengine.com,in2-smtp.messagingengine.com); x-return-mx=pass smtp.domain=fastmail.fm policy.is_org=yes (MX Records found: in1-smtp.messagingengine.com,in2-smtp.messagingengine.com); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=-100 state=0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=lists.illumos.org; h= date:from:to:message-id:mime-version:content-type:list-help :list-id:list-post:list-subscribe:reply-to:subject :content-transfer-encoding:list-unsubscribe; s=dkim-1; t= 1730835144; x=1730921544; bh=5RoudD0gCrvPnMZ6gR9pqTnN9VptWwpz0kB HxdIkA7g=; b=giye9llNR4fFcS/BV71dgHhgrCTUC/Qv0Pq7DMM9tZClKyNSa3p RGY1mzr+T5waXcwcsIW074BcoT7LiCbUfr/uiPeQaWfhqh62/KzJkL+9J2T8pNGQ N9Tg0034f14cWXYeYtsGjA/l299eN4uzB7ovfN06oQ8wV1O1NqvbNoos= Received: from tb-mx1.topicbox.com (localhost.local [127.0.0.1]) by tb-mx1.topicbox.com (Postfix) with ESMTP id 31F851DD0DF for ; Tue, 5 Nov 2024 14:30:29 -0500 (EST) (envelope-from gary_mills@fastmail.fm) Received: from tb-mx1.topicbox.com (localhost [127.0.0.1]) by tb-mx1.topicbox.com (Authentication Milter) with ESMTP id 915A13BA72F; Tue, 5 Nov 2024 14:30:29 -0500 ARC-Seal: i=1; a=rsa-sha256; cv=none; d=topicbox.com; s=arcseal; t= 1730835029; b=LlDiDK4W07w0/B51KQVAR7XyRfJVqqZqkD8gWG3nOG46nyAPUr PKVGYbPuhX3b1+4fAfX/Q3wYSgkwtvM3d2PaFQTIsllPpZvIIT2mr25oyeL5vivL EY3KGEVxoNbOAuNkM2CGCAcMsaRXrlG1iJUBsLUUfh2Yy0g1VzHWz/n6BZWWOE4a uMya1UeouonK7QetpaTX5g4hF3nbbiJiytedciNXVL1sJL003OC9UD62aQ41sxG/ mCLjNj90fjUlf/yzSdCggAEjMIUowna4KHoCpY8sGzGypuEudty9veDXIOvFeJes /TVbvpEexfvO8mU4+EMZIO+Qwxi39vTeeggA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d= topicbox.com; h=date:from:to:subject:message-id:mime-version :content-type; s=arcseal; t=1730835029; bh=52wyBht9UQ9SLEIlJ6i3L 1tjTN0Vcqa2b0a0kIbxSA4=; b=RkUCzllpgX38JNh53TVZAStopPNnoDAkskUil OmFBdEMzi3SEUNX3xii7XCFuaN1+39DlMP0aRaKLjVtpVtU+10hhOFiFFTkMrgCr 3mVLseSJtg4FQgLCFQISEiXfJQMHy8ZgoJZLA2MU68+c/5gmqVzBBF/RYoqnB4tn U/TGQtmpFmUVnVP2IN4y+Uu01OAhbMgvV+13PL51wwhVAqSqlt/9sRc87r9/eRxp eaKiOHuNpymOTY/jO8XBu4HSRdUGsiaLBf/UDrh6OyipgJB0i8PKBU1WS9CwXj+h LHo0IMcsGfn2E1OiB3XVi/Dioshyz2D+qUtstefgT9PAEsclg== ARC-Authentication-Results: i=1; tb-mx1.topicbox.com; arc=none (no signatures found); bimi=skipped (DMARC Policy is not at enforcement); dkim=pass (2048-bit rsa key sha256) header.d=fastmail.fm header.i=@fastmail.fm header.b=ly2MZq9E header.a=rsa-sha256 header.s=fm3 x-bits=2048; dkim=pass (2048-bit rsa key sha256) header.d=messagingengine.com header.i=@messagingengine.com header.b=Uwr/udsP header.a=rsa-sha256 header.s=fm3 x-bits=2048; dmarc=pass policy.published-domain-policy=none policy.published-subdomain-policy=none policy.applied-disposition=none policy.evaluated-disposition=none (p=none,sp=none,d=none,d.eval=none) policy.policy-from=p header.from=fastmail.fm; iprev=pass smtp.remote-ip=103.168.172.148 (fout-a5-smtp.messagingengine.com); spf=pass smtp.mailfrom=gary_mills@fastmail.fm smtp.helo=fout-a5-smtp.messagingengine.com; x-aligned-from=pass (Address match); x-me-sender=pass policy.xms= VXIqZ6qg16kLT1-BN6vzrewhN7O9jr5pd3EuVNJru52hkSANEQqDAkk9TbPP9Ms0RbwZGzr46_HN8RhN6sqbmiG1QrHk8AvodooEwzd-59iJJYjeOQaCMIL17YSc5j8WWkyOg4HCtpEYWqM; x-ptr=pass smtp.helo=fout-a5-smtp.messagingengine.com policy.ptr=fout-a5-smtp.messagingengine.com; x-return-mx=pass header.domain=fastmail.fm policy.is_org=yes (MX Records found: in1-smtp.messagingengine.com,in2-smtp.messagingengine.com); x-return-mx=pass smtp.domain=fastmail.fm policy.is_org=yes (MX Records found: in1-smtp.messagingengine.com,in2-smtp.messagingengine.com); x-tls=pass smtp.version=TLSv1.2 smtp.cipher=ECDHE-RSA-AES256-GCM-SHA384 smtp.bits=256/256; x-vs=clean score=-100 state=0 X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgeefuddrtddtgdeljecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdpuffr tefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnth hsucdlqddutddtmdenucfjughrpeffhffvuffkgggtugesthdtredttddtvdenucfhrhho mhepifgrrhihucfoihhllhhsuceoghgrrhihpghmihhllhhssehfrghsthhmrghilhdrfh hmqeenucggtffrrghtthgvrhhnpeehvdevjefghedvueefjeelffffvefgjefhvddvvdei hfehleduueduteffkeekudenucffohhmrghinhepihhllhhumhhoshdrohhrghenucfkph epuddtfedrudeikedrudejvddrudegkeenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepihhnvghtpedutdefrdduieekrddujedvrddugeekpdhhvghlohepfhhouhhtqd grhedqshhmthhprdhmvghsshgrghhinhhgvghnghhinhgvrdgtohhmpdhmrghilhhfrhho mhepoehgrghrhigpmhhilhhlshesfhgrshhtmhgrihhlrdhfmheqpdhnsggprhgtphhtth hopedupdhrtghpthhtohepoeguvghvvghlohhpvghrsehlihhsthhsrdhilhhluhhmohhs rdhorhhgqe X-ME-VSScore: -100 X-ME-VSCategory: clean Received-SPF: pass (fastmail.fm: Sender is authorized to use 'gary_mills@fastmail.fm' in 'mfrom' identity (mechanism 'include:spf.messagingengine.com' matched)) receiver=tb-mx1.topicbox.com; identity=mailfrom; envelope-from="gary_mills@fastmail.fm"; helo=fout-a5-smtp.messagingengine.com; client-ip=103.168.172.148 Received: from fout-a5-smtp.messagingengine.com (fout-a5-smtp.messagingengine.com [103.168.172.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by tb-mx1.topicbox.com (Postfix) with ESMTPS for ; Tue, 5 Nov 2024 14:30:28 -0500 (EST) (envelope-from gary_mills@fastmail.fm) Received: from phl-compute-02.internal (phl-compute-02.phl.internal [10.202.2.42]) by mailfout.phl.internal (Postfix) with ESMTP id A5E0613806F5 for ; Tue, 5 Nov 2024 14:30:28 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-02.internal (MEProxy); Tue, 05 Nov 2024 14:30:28 -0500 X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefuddrtddtgdeliecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdpuffr tefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnth hsucdlqddutddtmdenucfjughrpeffhffvuffkgggtugesthdtredttddtvdenucfhrhho mhepifgrrhihucfoihhllhhsuceoghgrrhihpghmihhllhhssehfrghsthhmrghilhdrfh hmqeenucggtffrrghtthgvrhhnpeehvdevjefghedvueefjeelffffvefgjefhvddvvdei hfehleduueduteffkeekudenucffohhmrghinhepihhllhhumhhoshdrohhrghenucevlh hushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehgrghrhigpmhhi lhhlshesfhgrshhtmhgrihhlrdhfmhdpnhgspghrtghpthhtohepuddpmhhouggvpehsmh htphhouhhtpdhrtghpthhtohepuggvvhgvlhhophgvrheslhhishhtshdrihhllhhumhho shdrohhrgh X-ME-Proxy: Feedback-ID: i28b0411d:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Tue, 5 Nov 2024 14:30:27 -0500 (EST) Received: from ryzen.qtnet (localhost [127.0.0.1]) by ryzen.qtnet (8.17.2+Sun/8.14.4) with ESMTP id 4A5JUOqT002346 for ; Tue, 5 Nov 2024 13:30:24 -0600 (CST) Received: (from mills@localhost) by ryzen.qtnet (8.17.2+Sun/8.14.4/Submit) id 4A5JUNEL002345 for developer@lists.illumos.org; Tue, 5 Nov 2024 13:30:23 -0600 (CST) Date: Tue, 5 Nov 2024 13:30:23 -0600 From: Gary Mills To: illumos-developer Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Disposition: inline Topicbox-Policy-Reasoning: allow: sender is a member Topicbox-Message-UUID: 6e04dc90-9bac-11ef-8e84-efa53666ff39 Archived-At: =?UTF-8?B?PGh0dHBzOi8vaWxsdW1vcy50b3BpY2JveC5jb20vZ3JvdXBz?= =?UTF-8?B?L2RldmVsb3Blci9UYjAxMTFkOGMyMmIzNzkzOC1NMjFlMmM0NmQyOWRhNzIy?= =?UTF-8?B?YWJhN2ZiOGU2Pg==?= List-Help: List-Id: "illumos-developer" List-Post: List-Software: Topicbox v0 List-Subscribe: Precedence: list Reply-To: illumos-developer Subject: [developer] Sshd fails on OS upgrade Content-Transfer-Encoding: quoted-printable List-Unsubscribe: , Topicbox-Delivery-ID: 2:illumos:a901537c-2aea-11e7-965f-d98f9f16e227:81958daa-7202-11ef-bbf2-18142b2d11b0:M21e2c46d29da722aba7fb8e6:1:jshKWYuvQR32gQPxcdsuVmnDRsPxG6Mcg651oiMJ-vE Yesterday, I upgraded one of my systems from hipster-20230813 to hipster-20241104. (The number is the ISO date with dashes removed). On reboot, everything was successful, except the console said: SUNW-MSG-ID: SMF-8000-YX, TYPE: defect, VER: 1, SEVERITY: major EVENT-TIME: Mon Nov 4 16:55:50 CST 2024 PLATFORM: S5510, CSN: empty, HOSTNAME: tyan SOURCE: software-diagnosis, REV: 0.1 EVENT-ID: 26a5e479-0755-47d0-837d-4a0fbb3f6e99 DESC: A service failed - a start, stop or refresh method failed. Refer to http://illumos.org/msg/SMF-8000-YX for more information. AUTO-RESPONSE: The service has been placed into the maintenance state. IMPACT: svc:/network/ssh:default is unavailable. REC-ACTION: Run 'svcs -xv svc:/network/ssh:default' to determine the generic +reason why the service failed, the location of any logfiles, and a list of +other services impacted. The server log said: [ Nov 4 16:55:49 Executing start method ("/lib/svc/method/sshd start"). ] /etc/ssh/sshd_config line 85: Deprecated option ServerKeyBits /etc/ssh/sshd_config line 90: Deprecated option KeyRegenerationInterval /etc/ssh/sshd_config: line 103: Bad configuration option: MaxAuthTriesLog /etc/ssh/sshd_config line 132: Deprecated option RhostsAuthentication /etc/ssh/sshd_config line 138: Deprecated option RhostsRSAAuthentication /etc/ssh/sshd_config line 145: Deprecated option RSAAuthentication /etc/ssh/sshd_config: terminating, 1 bad configuration options [ Nov 4 16:55:49 Method "start" exited with status 95. ] The configuration file was /etc/ssh/sshd_config . When I edited that file to comment out all the Deprecated or Bad options, the service ran with no fatal errors. I don't know where that file came from, but it dates from 2017, and often mentions Oracle and Solaris. Perhaps it came with an earlier version of the ssh package. The options mentioned all were in the version 1 section. In any case, the ssh package should include a working configuration file, for ssh dummies like me. That way, the service would run without all those errors. I don't even use ssh on that system. --=20 -Gary Mills- -refurb- -Winnipeg, Manitoba, Canada- ------------------------------------------ illumos: illumos-developer Permalink: https://illumos.topicbox.com/groups/developer/Tb0111d8c22b37938-= M21e2c46d29da722aba7fb8e6 Delivery options: https://illumos.topicbox.com/groups/developer/subscription