Zypper UP breaks sshd

[frequency]

Hi,

Installed vicibox 8.1.2 version a week back and updated it via Zypper and had no issues.

Today, i did the same and passwords won't work for root. Did zypper ref and zypper up. The server wasn't rebooted so the SSH is still online but even when i change password for the root, it won't connect saying the password is incorrect. The password vicidial won't work nor the default pass with which the server was installed with.

EDIT: it seems like it breaks open-ssh. need to add to variable in sshd_config work but still, you would be locked out if you don't have direct access. It happening after 19 Oct update and was working fine until 18 Oct update.

[williamconley]

1) Post your Vicidial Version with Build even if you don't think it's relevant. Always. make it a habit.

2) Downgrade the package you believe responsible to see if you can "fix and re-break" by upgrading downgrading that package. Otherwise there's still the possibility that you have a completely different problem. I can't count the number of times a simple change has broken something ... and it turns out something else entirely was the problem and the "simple change" was a mere coincidence.

3) Does key access still work? Is it password-only that fails?

4) WHY are you doing daily updates?

[rameez.amjad4]

Can you please post command to downgrade the ssh package or is it OK if we do new installation with out zypper up - y updating it?
Please update, thanks.

[Kumba]

I've downgraded openssh from 7.8p1 back to 7.7p1 since that is what was in ViciBox anyways. You should be able to do a zypper refresh and zypper up to pull it in. I've also unlinked the home:vicidial openssh package from the opensuse network one, so it won't auto-publish any updates they make.

[frequency]

I've downgraded openssh from 7.8p1 back to 7.7p1 since that is what was in ViciBox anyways. You should be able to do a zypper refresh and zypper up to pull it in. I've also unlinked the home:vicidial openssh package from the opensuse network one, so it won't auto-publish any updates they make.

Perfect, thank you! Although, i don't see the update after zypper refresh and up. "Nothing to do"

[Kumba]

I've downgraded openssh from 7.8p1 back to 7.7p1 since that is what was in ViciBox anyways. You should be able to do a zypper refresh and zypper up to pull it in. I've also unlinked the home:vicidial openssh package from the opensuse network one, so it won't auto-publish any updates they make.

Perfect, thank you! Although, i don't see the update after zypper refresh and up. "Nothing to do"

Oh, my bad. I forgot to increase the release priority of it so that it takes precedence. Normally the packages go by pure version number. There's a secondary 'release' priority number that starts at zero so you can do things like rollbacks on packages easily. I forgot to increment this from 0 to 1.

Give the repositories about 30 minutes to rebuild and you should see it pull in during a zypper up.

[frequency]

I've downgraded openssh from 7.8p1 back to 7.7p1 since that is what was in ViciBox anyways. You should be able to do a zypper refresh and zypper up to pull it in. I've also unlinked the home:vicidial openssh package from the opensuse network one, so it won't auto-publish any updates they make.

Perfect, thank you! Although, i don't see the update after zypper refresh and up. "Nothing to do"

Oh, my bad. I forgot to increase the release priority of it so that it takes precedence. Normally the packages go by pure version number. There's a secondary 'release' priority number that starts at zero so you can do things like rollbacks on packages easily. I forgot to increment this from 0 to 1.

Give the repositories about 30 minutes to rebuild and you should see it pull in during a zypper up.

openSUSE-Leap-42.3-ViciDial was rebuilt but no update for open-ssh yet

We managed to make it work by adding the following to sshd_config
PermitRootLogin yes
PubKeyAuthentication yes

Cheers!

[rameez.amjad4]

So if we make a fresh install now and do zypper up -y it will work smooth?

We will be access server from putty now?

[frequency]

So if we make a fresh install now and do zypper up -y it will work smooth?

We will be access server from putty now?

Yes, it works now. openssh-7.7p1-10.1.x86_64.

Thanks a lot!

[rameez.amjad4]

Yes it's working, thanks