{"action":"closed","issue":{"url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH/issues/1254","repository_url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH","labels_url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH/issues/1254/labels{/name}","comments_url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH/issues/1254/comments","events_url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH/issues/1254/events","html_url":"https://github.com/PowerShell/Win32-OpenSSH/issues/1254","id":362960623,"node_id":"MDU6SXNzdWUzNjI5NjA2MjM=","number":1254,"title":"Unable to log in to server with public key after changing server's password","user":{"login":"kentnek","id":7024160,"node_id":"MDQ6VXNlcjcwMjQxNjA=","avatar_url":"https://avatars1.githubusercontent.com/u/7024160?v=4","gravatar_id":"","url":"https://api.github.com/users/kentnek","html_url":"https://github.com/kentnek","followers_url":"https://api.github.com/users/kentnek/followers","following_url":"https://api.github.com/users/kentnek/following{/other_user}","gists_url":"https://api.github.com/users/kentnek/gists{/gist_id}","starred_url":"https://api.github.com/users/kentnek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kentnek/subscriptions","organizations_url":"https://api.github.com/users/kentnek/orgs","repos_url":"https://api.github.com/users/kentnek/repos","events_url":"https://api.github.com/users/kentnek/events{/privacy}","received_events_url":"https://api.github.com/users/kentnek/received_events","type":"User","site_admin":false},"labels":[{"id":442064268,"node_id":"MDU6TGFiZWw0NDIwNjQyNjg=","url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH/labels/Area-Core","name":"Area-Core","color":"5319e7","default":false},{"id":442067553,"node_id":"MDU6TGFiZWw0NDIwNjc1NTM=","url":"https://api.github.com/repos/PowerShell/Win32-OpenSSH/labels/Issue-Discussion","name":"Issue-Discussion","color":"fc2929","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-09-23T17:25:30Z","updated_at":"2018-09-26T18:11:29Z","closed_at":"2018-09-26T18:11:29Z","author_association":"NONE","body":"Please answer the following\r\n\r\n**If it is a terminal issue then please go through wiki\r\nhttps://github.com/PowerShell/Win32-OpenSSH/wiki/TTY-PTY-support-in-Windows-OpenSSH**\r\n\r\n**\"OpenSSH for Windows\" version**\r\n`7.7.2.0`\r\n\r\n**Server OperatingSystem**\r\n`Windows 10 Pro`\r\n\r\n**Client OperatingSystem**\r\n`Windows 10 Enterprise`\r\n\r\n**What is failing**\r\nOpenSSH was installed using `chocolatey`. The client could `ssh` into my server (both are on the same network) until I changed the Windows password on the server itself. Now both `password` and `public-key` methods fail to work.\r\n\r\n**Expected output**\r\nAble to log in as before.\r\n\r\n**Actual output**\r\nUnable to log in using either `password` or `public-key`:\r\n```\r\nPermission denied, please try again.\r\n```\r\n\r\n**Logs**\r\n```\r\nPS C:\\Windows\\system32> psexec -s sshd.exe -ddd\r\n\r\nPsExec v2.2 - Execute processes remotely\r\nCopyright (C) 2001-2016 Mark Russinovich\r\nSysinternals - www.sysinternals.com\r\n\r\n\r\ndebug2: load_server_config: filename __PROGRAMDATA__\\\\ssh/sshd_config\r\ndebug2: load_server_config: done config len = 159\r\ndebug2: parse_server_config: config __PROGRAMDATA__\\\\ssh/sshd_config len 159\r\ndebug3: __PROGRAMDATA__\\\\ssh/sshd_config:9 setting Port 22\r\ndebug3: __PROGRAMDATA__\\\\ssh/sshd_config:38 setting AuthorizedKeysFile .ssh/authorized_keys\r\ndebug3: __PROGRAMDATA__\\\\ssh/sshd_config:76 setting Subsystem sftp      sftp-server.exe\r\ndebug1: sshd version OpenSSH_for_Windows_7.7, LibreSSL 2.6.4\r\ndebug1: private host key #0: ssh-rsa SHA256:/uBa1Za0z2zSGQ0Y9uik56pG0bxe73Cddh28izl2YD4\r\ndebug1: private host key #1: ecdsa-sha2-nistp256 SHA256:0fYsqA40DuV4zW2tim46pg0/cuC5/SBkbUMxmu3tMic\r\ndebug1: private host key #2: ssh-ed25519 SHA256:aM6mL06EnHRIxecmQ+wDxD0HRKm+DSqHTqoWSv5cjVc\r\ndebug1: rexec_argv[0]='sshd.exe'\r\ndebug1: rexec_argv[1]='-ddd'\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug3: sock_set_v6only: set socket 3 IPV6_V6ONLY\r\ndebug1: Bind to port 22 on ::.\r\nServer listening on :: port 22.\r\ndebug2: fd 4 setting O_NONBLOCK\r\ndebug1: Bind to port 22 on 0.0.0.0.\r\nServer listening on 0.0.0.0 port 22.\r\ndebug3: fd 5 is not O_NONBLOCK\r\ndebug1: Server will not fork when running in debugging mode.\r\ndebug3: send_rexec_state: entering fd = 8 config len 159\r\ndebug3: ssh_msg_send: type 0\r\ndebug3: send_rexec_state: done\r\nConnection from 192.168.50.130 port 63154 on 192.168.50.179 port 22\r\ndebug1: Client protocol version 2.0; client software version OpenSSH_7.7\r\ndebug1: match: OpenSSH_7.7 pat OpenSSH* compat 0x04000000\r\ndebug1: Local version string SSH-2.0-OpenSSH_for_Windows_7.7\r\ndebug2: fd 5 setting O_NONBLOCK\r\ndebug3: spawning \"C:\\\\Program Files\\\\OpenSSH-Win64\\\\sshd.exe\" \"-ddd\" \"-y\"\r\ndebug2: Network child is on pid 16612\r\ndebug3: send_rexec_state: entering fd = 4 config len 159\r\ndebug3: ssh_msg_send: type 0\r\ndebug3: send_rexec_state: done\r\ndebug3: ssh_msg_send: type 0\r\ndebug3: ssh_msg_send: type 0\r\ndebug3: preauth child monitor started\r\ndebug3: recv_rexec_state: entering fd = 3\r\ndebug3: ssh_msg_recv entering\r\ndebug3: recv_rexec_state: done\r\ndebug2: parse_server_config: config __PROGRAMDATA__\\\\ssh/sshd_config len 159\r\ndebug3: __PROGRAMDATA__\\\\ssh/sshd_config:9 setting Port 22\r\ndebug3: __PROGRAMDATA__\\\\ssh/sshd_config:38 setting AuthorizedKeysFile .ssh/authorized_keys\r\ndebug3: __PROGRAMDATA__\\\\ssh/sshd_config:76 setting Subsystem sftp      sftp-server.exe\r\ndebug1: sshd version OpenSSH_for_Windows_7.7, LibreSSL 2.6.4\r\ndebug3: ssh_msg_recv entering\r\ndebug3: ssh_msg_recv entering\r\ndebug2: fd 5 setting O_NONBLOCK\r\ndebug1: list_hostkey_types: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]\r\ndebug3: send packet: type 20 [preauth]\r\ndebug1: SSH2_MSG_KEXINIT sent [preauth]\r\ndebug3: receive packet: type 20 [preauth]\r\ndebug1: SSH2_MSG_KEXINIT received [preauth]\r\ndebug2: local server KEXINIT proposal [preauth]\r\ndebug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1 [preauth]\r\ndebug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]\r\ndebug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]\r\ndebug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]\r\ndebug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]\r\ndebug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]\r\ndebug2: compression ctos: none [preauth]\r\ndebug2: compression stoc: none [preauth]\r\ndebug2: languages ctos:  [preauth]\r\ndebug2: languages stoc:  [preauth]\r\ndebug2: first_kex_follows 0  [preauth]\r\ndebug2: reserved 0  [preauth]\r\ndebug2: peer client KEXINIT proposal [preauth]\r\ndebug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c [preauth]\r\ndebug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa [preauth]\r\ndebug2: ciphers ctos: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes256-cbc,aes192-cbc [preauth]\r\ndebug2: ciphers stoc: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes256-cbc,aes192-cbc [preauth]\r\ndebug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]\r\ndebug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]\r\ndebug2: compression ctos: none,zlib@openssh.com,zlib [preauth]\r\ndebug2: compression stoc: none,zlib@openssh.com,zlib [preauth]\r\ndebug2: languages ctos:  [preauth]\r\ndebug2: languages stoc:  [preauth]\r\ndebug2: first_kex_follows 0  [preauth]\r\ndebug2: reserved 0  [preauth]\r\ndebug1: kex: algorithm: curve25519-sha256 [preauth]\r\ndebug1: kex: host key algorithm: ecdsa-sha2-nistp256 [preauth]\r\ndebug1: kex: client->server cipher: aes128-ctr MAC: umac-64-etm@openssh.com compression: none [preauth]\r\ndebug1: kex: server->client cipher: aes128-ctr MAC: umac-64-etm@openssh.com compression: none [preauth]\r\ndebug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]\r\ndebug3: receive packet: type 30 [preauth]\r\ndebug3: mm_key_sign entering [preauth]\r\ndebug3: mm_request_send entering: type 6 [preauth]\r\ndebug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]\r\ndebug3: mm_request_receive_expect entering: type 7 [preauth]\r\ndebug3: mm_request_receive entering [preauth]\r\ndebug3: mm_request_receive entering\r\ndebug3: monitor_read: checking request 6\r\ndebug3: mm_answer_sign\r\ndebug3: mm_answer_sign: hostkey proof signature 0000025B92E482A0(100)\r\ndebug3: mm_request_send entering: type 7\r\ndebug2: monitor_read: 6 used once, disabling now\r\ndebug3: send packet: type 31 [preauth]\r\ndebug3: send packet: type 21 [preauth]\r\ndebug2: set_newkeys: mode 1 [preauth]\r\ndebug1: rekey after 4294967296 blocks [preauth]\r\ndebug1: SSH2_MSG_NEWKEYS sent [preauth]\r\ndebug1: expecting SSH2_MSG_NEWKEYS [preauth]\r\ndebug3: send packet: type 7 [preauth]\r\ndebug3: receive packet: type 21 [preauth]\r\ndebug1: SSH2_MSG_NEWKEYS received [preauth]\r\ndebug2: set_newkeys: mode 0 [preauth]\r\ndebug1: rekey after 4294967296 blocks [preauth]\r\ndebug1: KEX done [preauth]\r\ndebug3: receive packet: type 5 [preauth]\r\ndebug3: send packet: type 6 [preauth]\r\ndebug3: receive packet: type 50 [preauth]\r\ndebug1: userauth-request for user kent service ssh-connection method none [preauth]\r\ndebug1: attempt 0 failures 0 [preauth]\r\ndebug3: mm_getpwnamallow entering [preauth]\r\ndebug3: mm_request_send entering: type 8 [preauth]\r\ndebug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]\r\ndebug3: mm_request_receive_expect entering: type 9 [preauth]\r\ndebug3: mm_request_receive entering [preauth]\r\ndebug3: mm_request_receive entering\r\ndebug3: monitor_read: checking request 8\r\ndebug3: mm_answer_pwnamallow\r\ndebug2: parse_server_config: config reprocess config len 159\r\n```\r\n\r\nThis is where it gets weird:\r\n```\r\ndebug1: get_passwd: LookupAccountName() failed: 1332.\r\nInvalid user kent from 192.168.50.130 port 63154\r\n```\r\n\r\nContinue:\r\n```\r\ndebug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 0\r\ndebug3: mm_request_send entering: type 9\r\ndebug2: monitor_read: 8 used once, disabling now\r\ndebug3: mm_inform_authserv entering [preauth]\r\ndebug3: mm_request_send entering: type 4 [preauth]\r\ndebug2: input_userauth_request: try method none [preauth]\r\ndebug3: userauth_finish: failure partial=0 next methods=\"publickey,password,keyboard-interactive\" [preauth]\r\ndebug3: send packet: type 51 [preauth]\r\ndebug3: mm_request_receive entering\r\ndebug3: monitor_read: checking request 4\r\ndebug3: mm_answer_authserv: service=ssh-connection, style=\r\ndebug2: monitor_read: 4 used once, disabling now\r\ndebug3: receive packet: type 50 [preauth]\r\ndebug1: userauth-request for user kent service ssh-connection method publickey [preauth]\r\ndebug1: attempt 1 failures 0 [preauth]\r\ndebug2: input_userauth_request: try method publickey [preauth]\r\ndebug2: userauth_pubkey: disabled because of invalid user [preauth]\r\n```\r\n^ Public key is disabled due to the `invalid user` error.\r\n\r\n```\r\ndebug3: userauth_finish: failure partial=0 next methods=\"publickey,password,keyboard-interactive\" [preauth]\r\ndebug3: send packet: type 51 [preauth]\r\ndebug3: receive packet: type 50 [preauth]\r\ndebug1: userauth-request for user kent service ssh-connection method keyboard-interactive [preauth]\r\ndebug1: attempt 2 failures 1 [preauth]\r\ndebug2: input_userauth_request: try method keyboard-interactive [preauth]\r\ndebug1: keyboard-interactive devs  [preauth]\r\ndebug1: auth2_challenge: user=kent devs= [preauth]\r\ndebug1: kbdint_alloc: devices '' [preauth]\r\ndebug2: auth2_challenge_start: devices  [preauth]\r\ndebug3: userauth_finish: failure partial=0 next methods=\"publickey,password,keyboard-interactive\" [preauth]\r\ndebug3: send packet: type 51 [preauth]\r\n```"}}
{"actor":{"display_login":"kentnek"}}