Description
"OpenSSH for Windows" version
((Get-Item (Get-Command sshd).Source).VersionInfo.FileVersion)
7.7.2.2
Server OperatingSystem
((Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows nt\CurrentVersion\" -Name ProductName).ProductName)
Windows 10 Enterprise
Client OperatingSystem
Windows 10 build 1903
What is failing
I cannot ssh into my machine. I've set this up before, but this time my laptop is not domain-joined, but instead AAD-joined (Intune managed), which seems to be part of the problem from what information I could find about LookupAccountName
and error 1332.
My sshd_config is nearly default. I set PasswordAuthentication
to no
, but apart from that (and temporarily logging DEBUG3
server output), nothing else is different.
From the debug log, I see:
10276 2019-10-06 12:32:39.152 debug1: get_passwd: LookupAccountName() failed: 1332.
10276 2019-10-06 12:32:39.152 debug2: parse_server_config: config reprocess config len 336
10276 2019-10-06 12:32:39.152 debug3: checking match for 'Group administrators' user heaths host fe80::6c5d:4766:1774:b485%16 addr fe80::6c5d:4766:1774:b485%16 laddr fe80::6c5d:4766:1774:b485%16 lport 22
10276 2019-10-06 12:32:39.152 debug1: get_passwd: LookupAccountName() failed: 1332.
10276 2019-10-06 12:32:39.152 debug1: Can't match group at line 84 because user heaths does not exist
10276 2019-10-06 12:32:39.152 debug3: match not found
My $ProgramData\ssh\administrators_authorized_keys contains my public key, as does my ~.ssh\authorized_keys. icacls shows appropriate ownership and DACLs.
Basically, everything is set up as I've done before except that I'm not domain joined (normally do, but was having some unrelated problems setting up a new machine).
Expected output
I can log in via ssh.
Actual output
I'm denied access.