[Mageia-dev] updating sshd kill ssh connection

[Colin Guthrie]

'Twas brillig, and Olivier Thauvin at 27/06/12 09:17 did gyre and gimble:
> * Sander Lepik (sander.lepik at eesti.ee) wrote:
>> 27.06.2012 11:06, Olivier Thauvin kirjutas:
>>> I was updating remotly my build machine when:
>>>
>>>   192/254: openssh-server
>>> #############################################################################################################################################################
>>> Migrating sysvinit service 'sshd' to systemd native unit 'sshd.service'
>>> via systemd install rules.
>>> Connection to cauldron64.latmos.ipsl.fr closed by remote host.
>>> Connection to cauldron64.latmos.ipsl.fr closed.
>>>
>>> This must _never_ happend if the update goes wrong you completly loose
>>> the hand on the computer.
>>>
>>> BTW: restarting sshd never shutdown pending ssh connection.
>>>
>>> Please remove or fix this.
>>>
>>> Let's see the state of machine now I was disconnected during urpmi...
>> Check your /etc/ssh/sshd_config - you must use "UsePAM yes" there.
>> https://wiki.mageia.org/en/Mageia_2_Errata#SSH_daemon_issues
> 
> We already use PAM in ssh (because ldap)...

Then check your /etc/pam.d/system-auth (or /etc/pam.d/sshd which should
include system-auth).


The system-auth we ship includes:

-session    optional      pam_systemd.so


This ensures that user processes inside sshd are not marked as processes
of the service and thus do not get reaped.


So it looks like something has not been propagated properly there on
upgrade (system-auth should be modified appropriately, but perhaps sshd
is custom or some other changes are messing things up).

There is certainly not a fundamental error, so it must be configuration
in some regard:

[colin at jimmy ~]$ ssh marley
Last login: Wed Jun 27 09:23:42 2012 from jimmy.rasta.guthr.ie
[colin at marley ~]$ sudo -i
[root at marley ~]# systemctl restart sshd.service
[root at marley ~]# logout


Col


-- 

Colin Guthrie
colin(at)mageia.org
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/