Forum Discussion

silentbob's avatar
silentbob
Icon for Nimbostratus rankNimbostratus
Nov 07, 2023

SSH auth via key not working after installing 13.1.5 HF 20 and LogLevel can't be increased

Hi guys,

I am struggeling with an issue on the BigIP, after installing the Hotfix 20

I am not able to login via ssh using key authentification. 

I can login via password.

Figuring out what is going wrong is hard, without any usefull Logging.

so I changed the loglevel in

/var/run/config/sshd_config

LogLevel DEBUG3

and did a 

service sshd restart

also an 

bigstart restart sshd

both said restart OK, but still only successful logins get logged.

So I tried

tmsh modify /sys sshd log-level debug3

restarted sshd again and again not change in the logs.

can anyone tell me why the Loglevel increase has no efffect or maybe tell me if the HF 20 changed something in handling ssh keys on the BigIP

Any help is appreciated

event
security
    • whisperer's avatar
      whisperer
      Icon for MVP rankMVP
      Nov 11, 2023

      Such things have always been an issue. If you customize an F5 outside of the GUI or TMSH commands, you may lose certain customizations between upgrades.

      Also, let's be serious here. I'm not going to test the recreation of a symlink. This would take you 10 seconds to implement and test. If you want someone else to truly perform offline testing, and replicate your use case, you would need to provide UCS backups and such. That is all professional services. Of course, you can always submit an F5 support case ticket.

  • silentbob's avatar
    silentbob
    Icon for Nimbostratus rankNimbostratus
    Nov 13, 2023

    Hi,

     

    got it fixed last week. It was 2 things.

    It was a Link issue, but sadly through another coincidence It was not fixing it. So I thought this is not the fix.

    They removed the support of DSA ssh keys (what ist goog and completly fine).

    If increasing of the Loglevel would work, this would be easy to find, but this way it took me a lot of time.

    Now using secure Keys it's working again.

     

    But thx for your answers guys