Ethernet Switching
Ethernet Switching

root password won't work over ssh, from console works fine

‎06-14-2019 05:18 PM

Running into this issue on a new stack of ex2300 switches. Root access works fine from console, but when I try to ssh across the network I get password errors.

Did something change in newer versions of Junos?

Deploying this stack the same way we have deployed dozens of them from our "golden" config.

 

Software version 18.1 R3.3

 

Appreciate some insight.

3 REPLIES 3
Ethernet Switching
Solution
Accepted by topic author trink408
‎06-17-2019 05:13 AM

Re: root password won't work over ssh, from console works fine

‎06-14-2019 05:35 PM
Try 'set system services ssh root-login allow'
Default root-login is deny in latest releases.
Thanks,
Nellikka
JNCIE x3 (SEC #321; SP #2839; ENT #790)
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!
Ethernet Switching

Re: root password won't work over ssh, from console works fine

‎06-14-2019 08:52 PM

Look for root-login deny under ssh, that should mostly be it.

Ethernet Switching

Re: root password won't work over ssh, from console works fine

[ Edited ]
‎06-15-2019 04:33 AM

With newer versions of Junos the default is to deny root login via ssh.

Previously to deny root login had to be configured explicitly.

Now you need to configure explicitly to allow the root login instead.

 

And note that the best practice for any unix based system is to deny direct root ssh login and have uses escalate to root as needed on the cli.  Which is what drove the change in default behavior.

 

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home