Bug 16060

Summary:	For Raspberry Pi 4, 64-bit, OpenSSH password authentication doesn't work for root
Product:	buildroot	Reporter:	Sam <lists1>
Component:	Other	Assignee:	unassigned
Status:	RESOLVED MOVED
Severity:	normal	CC:	buildroot, yann.morin.1998
Priority:	P5
Version:	2024.02.1
Target Milestone:	---
Hardware:	Other
OS:	Linux
Host:		Target:
Build:

Description Sam 2024-05-09 22:11:49 UTC

Hello everyone

I'm new to buildroot. I tried the 32-bit version (armv7) with that Raspberry Pi 4 machine. All went well. I used it for a while, all good.

The configuration I used is basic, starting from `make raspberrypi4_defconfig`, the only things I changed were the root password + installed OpenSSH from the packages in `make menuconfig`, followed by `make all`. 

I realized I needed aarch64 architecture. I wiped the directory, extracted the tar, and started over. I followed the same steps, but starting with `make raspberrypi4_64_defconfig`, adding OpenSSH and setting the root password (same password from before), followed by `make all`. Flashed the imaged to an sd card, booted, all good.

Then, I tried to login with ssh, and I always got that the password is incorrect. I confirmed multiple times that the password is correct. No use.

I'm no pro, so I don't know how to use serial port or fancy stuff like that. I took the sd card out, mounted it, and added my ssh public key to authiorized_keys of root. Put back the sd card, and ssh then worked fine. I logged in.

Then, once I was in, I kept trying to login with the password, never worked. Loopback didn't work either. I changed the password multiple times. I tried many things, including manually putting the password in /etc/shadow, and running `passwd`, and confirming that the password in /etc/shadow is changing, but no use. I think it may be a bug in the build process, but I can't be sure.

Comment 1 Peter Seiderer 2024-05-10 11:24:55 UTC

diff -u /etc/ssh/sshd_config_orig /etc/ssh/sshd_config
--- /etc/ssh/sshd_config_orig
+++ /etc/ssh/sshd_config
@@ -29,7 +29,7 @@
 # Authentication:
 
 #LoginGraceTime 2m
-#PermitRootLogin prohibit-password
+PermitRootLogin yes
 #StrictModes yes
 #MaxAuthTries 6
 #MaxSessions 10

Comment 2 Sam 2024-05-10 11:49:36 UTC

Thank you, this fixes the issue.

I'm surprised though, because on failure, I got this message:

```
root@buildroot: Permission denied (publickey,password,keyboard-interactive).
```

which means that password was tried. I probably misunderstood the error message in ssh.

Apologies for the false alarm. Though I have to say that the default not accepting a password can be a problem, since this is a simple system.

Comment 3 Yann E. MORIN 2024-06-15 15:22:01 UTC

Thank you for your report.

The issue tracker for the Buildroot project has been moved to
the Gitlab.com issue tracker:
    https://gitlab.com/buildroot.org/buildroot/-/issues

We are taking this opportunity to close old issues in this old
tracker. If you believe your issue is still relevant, please
open one in the new issue tracker.

Thank you!