{"id":2722,"date":"2018-09-26T14:39:15","date_gmt":"2018-09-26T14:39:15","guid":{"rendered":"https:\/\/esferas.org\/msqlu\/?p=2722"},"modified":"2018-09-26T14:39:15","modified_gmt":"2018-09-26T14:39:15","slug":"sshd-maximum-authentication-attempts-exceeded","status":"publish","type":"post","link":"https:\/\/esferas.org\/msqlu\/2018\/09\/26\/sshd-maximum-authentication-attempts-exceeded\/","title":{"rendered":"sshd: maximum authentication attempts exceeded"},"content":{"rendered":"<p>for N user from XXX.XXX.XXX.XXX port XXXX y as\u00ed hasta que se te colma la paciencia.<\/p>\n<p><!--more--><\/p>\n<p>Veamos un registro de intento de conexi\u00f3n v\u00eda SSH de un cliente al que acabo de a\u00f1adir su clave p\u00fablica al archivo <em>~\/.ssh\/authorized_keys. <\/em><\/p>\n<pre class=\"lang:default decode:true\">debug1: Authentications that can continue: publickey,password,hostbased\r\ndebug1: Next authentication method: publickey\r\ndebug1: Offering RSA public key: victor@sarajevo\r\ndebug1: Authentications that can continue: publickey,password,hostbased\r\ndebug1: Offering RSA public key: Acceso desde la empresa\r\ndebug1: Authentications that can continue: publickey,password,hostbased\r\ndebug1: Offering RSA public key: victor@sarajevo\r\ndebug1: Authentications that can continue: publickey,password,hostbased\r\ndebug1: Offering RSA public key: victor@sarajevo\r\ndebug1: Authentications that can continue: publickey,password,hostbased\r\ndebug1: Offering RSA public key: Servidor de bases de datos\r\ndebug1: Authentications that can continue: publickey,password,hostbased\r\ndebug1: Offering RSA public key: victor@sarajevo\r\nReceived disconnect from xxx.xxx.xxx.xxx port 372:2: Too many authentication failures\r\n<\/pre>\n<p>Nada, que no hay forma. Por l oque se puede ver el servidor est\u00e1 indicando qu\u00e9 claves privadas acepta y espera que el cliente emplea la parte privada para asegurar la conexi\u00f3n.<\/p>\n<p>Se puede intentar decirle a <em>ssh<\/em> que solamente emplee contrase\u00f1as para acceder pero es un paso atr\u00e1s muy tonto tras haber llegado hasta aqu\u00ed, am\u00e9n de lo mucho que complica ese arreglo las tareas en lote y en segundo plano.<\/p>\n<p>No, la cuesti\u00f3n est\u00e1 en retocar el par\u00e1metro <code>MaxAuthTries<\/code> que como valor predeterminado est\u00e1 en seis claves hasta un valor que sea c\u00f3modo y, por supuesto, hacer limpia de claves autorizadas porque m\u00e1s de seis son quiz\u00e1s muchas m\u00e1quinas con acceso de escritura al repositorio (que es el caso) y m\u00e1s para un \u00fanico usuario.<\/p>\n<p>Una vez cambiado en <code>\/etc\/ssh\/sshd_config<\/code> se reinicia el servidor y ya deber\u00eda funcionar.<\/p>\n<h3>Enlaces y referencias<\/h3>\n<p>* <a class=\"question-hyperlink\" href=\"https:\/\/serverfault.com\/questions\/879778\/ssh-logs-i-dont-understand-maximum-authentication-attempts-exceeded\">SSH logs i dont understand: maximum authentication attempts exceeded<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>for N user from XXX.XXX.XXX.XXX port XXXX y as\u00ed hasta que se te colma la paciencia.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","webmentions_disabled_pings":false,"webmentions_disabled":false,"footnotes":""},"categories":[2],"tags":[93,726],"class_list":["post-2722","post","type-post","status-publish","format-standard","hentry","category-software","tag-ssh","tag-sshd"],"_links":{"self":[{"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/posts\/2722","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/comments?post=2722"}],"version-history":[{"count":2,"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/posts\/2722\/revisions"}],"predecessor-version":[{"id":2724,"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/posts\/2722\/revisions\/2724"}],"wp:attachment":[{"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/media?parent=2722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/categories?post=2722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/esferas.org\/msqlu\/wp-json\/wp\/v2\/tags?post=2722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}