From owner-freebsd-questions@freebsd.org Wed Feb 10 08:47:50 2021 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 484EA53FE23 for ; Wed, 10 Feb 2021 08:47:50 +0000 (UTC) (envelope-from yuripv@yuripv.dev) Received: from wnew1-smtp.messagingengine.com (wnew1-smtp.messagingengine.com [64.147.123.26]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4DbD103BSWz3Pv4 for ; Wed, 10 Feb 2021 08:47:47 +0000 (UTC) (envelope-from yuripv@yuripv.dev) Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailnew.west.internal (Postfix) with ESMTP id 3C428CC5; Wed, 10 Feb 2021 03:47:46 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute1.internal (MEProxy); Wed, 10 Feb 2021 03:47:46 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yuripv.dev; h= subject:to:cc:references:from:message-id:date:mime-version :in-reply-to:content-type:content-transfer-encoding; s=fm1; bh=p w8YdfFdvhxXmQ1sdqA92zYQhdjch4vV6BcuiyU6x5U=; b=VGUK0qOqvAu5YuI03 Elg9Xixcx3gzrEGePiEr63zY0iz0pCgu1NX3gpsAypTHK/toxRP3QAnNYXTjl4aD Sjw8Evx7Y7GOCH3vp1mHtTkAi/GpWtkUU0UN+ccMs5kHd/uA1OqerBGsgiLu3PaT DEyFDBvIfVoeGFMUFS6dMgx0C+WAhMSPysArvr2mFybeUr8wdjCq/HSOY8KGAC1D JdGRXkodLdV7eoU9GDj0k1Sw1jNezvGrNp7ZnPfBzzWCq0gsIylCSBir7qFfbgew LsRDd6awyAHzRj6jgCZGnTBwI6n7aeWh4pBCzx7IYtYGEvnroQN7r1N0WAklMSFA SF/QQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; bh=pw8YdfFdvhxXmQ1sdqA92zYQhdjch4vV6BcuiyU6x 5U=; b=FV1iWjfEo9qDdrlmuIj3hu2Q0mVLROCKc9K2+APb3/Fd3ruZ8iwehCLIg bSX7AoXkwj/hF48wnAs4mkGppevGOpA7sOShn6j66QRnrWz3G8AFS58y57+U6fQr llZs5TaTYH+hs1gyjUsn6HdFaQcnX7XeX2M12tfWpKB6vgC5TxNgbmgIx9+Jcqpu esv538zi8Ym7OIMNA4PHvEuHGbBMM2HPFzoR2uZEN5q7MANOI1+a2nL8osc5v5XT r5mW4SSVmTn7KY/2eRwOvspqvQv87f6Ju2brki/+Yq4cj2RaZ5nsT1X+MIpLhQIk CnTnXJcsUI3PEP6cb37quw3vB14Iw== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrheeigdduvdehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepuffvfhfhkffffgggjggtgfesthejredttdefjeenucfhrhhomhepjghurhhi ucfrrghnkhhovhcuoeihuhhrihhpvheshihurhhiphhvrdguvghvqeenucggtffrrghtth gvrhhnpeffhedvkeegieejveelvdffgfevueevgffgjefhleeuueevtedvvddvgfeiteff teenucfkphepledurddvgedtrdduvdegrddufeejnecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomhephihurhhiphhvseihuhhrihhpvhdruggvvh X-ME-Proxy: Received: from [192.168.1.6] (unknown [91.240.124.137]) by mail.messagingengine.com (Postfix) with ESMTPA id 826D224005C; Wed, 10 Feb 2021 03:47:44 -0500 (EST) Subject: Re: Permission denied via ssh over ipv6 To: PstreeM China , Doug McIntyre Cc: "freebsd-questions@freebsd.org" References: From: Yuri Pankov Message-ID: <65d54e7c-9d2c-ec74-1c1c-b0d87bfed6c1@yuripv.dev> Date: Wed, 10 Feb 2021 11:47:42 +0300 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 4DbD103BSWz3Pv4 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=yuripv.dev header.s=fm1 header.b=VGUK0qOq; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=FV1iWjfE; dmarc=none; spf=pass (mx1.freebsd.org: domain of yuripv@yuripv.dev designates 64.147.123.26 as permitted sender) smtp.mailfrom=yuripv@yuripv.dev X-Spamd-Result: default: False [-3.60 / 15.00]; TO_DN_EQ_ADDR_SOME(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:64.147.123.26]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[yuripv.dev:+,messagingengine.com:+]; NEURAL_HAM_SHORT(-1.00)[-1.000]; FREEMAIL_TO(0.00)[gmail.com,geeks.org]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; RBL_DBL_DONT_QUERY_IPS(0.00)[64.147.123.26:from]; ASN(0.00)[asn:11403, ipnet:64.147.123.0/24, country:US]; MIME_TRACE(0.00)[0:+]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.26:from]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[yuripv.dev:s=fm1,messagingengine.com:s=fm2]; FREEFALL_USER(0.00)[yuripv]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; SH_EMAIL_DBL_DONT_QUERY_IPS(0.00)[0.0.10.47:email]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[yuripv.dev]; SPAMHAUS_ZRD(0.00)[64.147.123.26:from:127.0.2.255]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DBL_PROHIBIT(0.00)[0.0.10.47:email]; MAILMAN_DEST(0.00)[freebsd-questions] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Feb 2021 08:47:50 -0000 PstreeM China wrote: > hi: > > thanks for your quickly reply. > ssh -vvv log as below, we can see the connection has already established, > but after input the password, it's not work.. > i'am sure the password is right, try modify the passwd has the same issue. > > about the DNS PTRs, how should i do ? the source is my home pc, not have > DNS domain. > > -------------------------------- > rpi% ssh myuser@2607:f130::6287 -vvv > OpenSSH_7.9p1, OpenSSL 1.1.1h-freebsd 22 Sep 2020 [...] > debug1: Local version string SSH-2.0-OpenSSH_7.9 FreeBSD-20200214 > debug1: Remote protocol version 2.0, remote software version OpenSSH_7.4 [...] > Permission denied, please try again. > myuser@2607:f130::6287's password: From your original question it's not clear whether FreeBSD 12.2 system is the client or server, and given the above I'm guessing it's the former as remote version doesn't say "FreeBSD" and is otherwise outdated; correct? Also, are you able to connect to 2607:f130::6287 from any other host to make sure it's correct address to use and is accepting v6 connections? > On Wed, Feb 10, 2021 at 1:18 PM Doug McIntyre wrote: > >> On Wed, Feb 10, 2021 at 11:47:08AM +0800, PstreeM China wrote: >>> Very thanks, this problem has searched from google, but not find the >>> solution to fix this issue. >>> >>> new install FreeBSD in virtual machine. >>> Freebsd version is 12.2 >>> Duel stack support ipv4 and ipv6; enable sshd as default. >>> I can ping the ipv4 and ipv6 address. >>> >>> The problem is: >>> SSH over ipv4 is work well. >>> But ssh over ipv6, Can be connected, but after input the password, it is >>> failed , give the notify : permission denied. >>> can not log into the server. >>> I am sure the password is right. >> >> >> Have you run 'ssh -vvv' to see all the very verbose debug information? >> >> Do you have proper DNS PTRs setup for your IPv6 block? It could be >> blocked by mismatch reverse DNS.