Skip to content

get_passwd: LookupAccountName() failed: 1332. #1476

Closed
@heaths

Description

@heaths

"OpenSSH for Windows" version
((Get-Item (Get-Command sshd).Source).VersionInfo.FileVersion)
7.7.2.2

Server OperatingSystem
((Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows nt\CurrentVersion\" -Name ProductName).ProductName)
Windows 10 Enterprise

Client OperatingSystem
Windows 10 build 1903

What is failing
I cannot ssh into my machine. I've set this up before, but this time my laptop is not domain-joined, but instead AAD-joined (Intune managed), which seems to be part of the problem from what information I could find about LookupAccountName and error 1332.

My sshd_config is nearly default. I set PasswordAuthentication to no, but apart from that (and temporarily logging DEBUG3 server output), nothing else is different.

From the debug log, I see:

10276 2019-10-06 12:32:39.152 debug1: get_passwd: LookupAccountName() failed: 1332.
10276 2019-10-06 12:32:39.152 debug2: parse_server_config: config reprocess config len 336
10276 2019-10-06 12:32:39.152 debug3: checking match for 'Group administrators' user heaths host fe80::6c5d:4766:1774:b485%16 addr fe80::6c5d:4766:1774:b485%16 laddr fe80::6c5d:4766:1774:b485%16 lport 22
10276 2019-10-06 12:32:39.152 debug1: get_passwd: LookupAccountName() failed: 1332.
10276 2019-10-06 12:32:39.152 debug1: Can't match group at line 84 because user heaths does not exist
10276 2019-10-06 12:32:39.152 debug3: match not found

My $ProgramData\ssh\administrators_authorized_keys contains my public key, as does my ~.ssh\authorized_keys. icacls shows appropriate ownership and DACLs.

Basically, everything is set up as I've done before except that I'm not domain joined (normally do, but was having some unrelated problems setting up a new machine).

Expected output
I can log in via ssh.

Actual output
I'm denied access.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions