Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SSHD won't start

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    15 Posts 4 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gwabber
      last edited by

      Hey all,

      After a reboot, the SSHD deamon won't start anymore. Rebooting it again doesn't help.

      What do I have tot do to get it working again?

      Thanks in advance!

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @gwabber
        last edited by

        @gwabber
        Check the system log. Maybe you can find hints for the reason.

        G 1 Reply Last reply Reply Quote 0
        • G
          gwabber @viragomann
          last edited by

          @viragomann thanks for your reply!

          I allready did, but there's nothing that could hint to a problem...

          GertjanG 1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan @gwabber
            last edited by

            @gwabber

            sshd doesn't need 'much' : at least one interface so it can bind to it :

            8014855a-2ca7-4676-bb0c-bac82793a0fa-image.png

            It will use these interface to accept 'all' (IPv4 and IPv6), post 22 by default.

            You have enabled it :

            fdb8c9e4-c888-41b0-abad-7de8bbd85741-image.png

            ?

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            G 1 Reply Last reply Reply Quote 0
            • G
              gwabber @Gertjan
              last edited by gwabber

              @gertjan thanks for your reply!

              Ben je ook Nederlands / Are you Dutch too? ;)

              I have SSH enabled, but the daemon won't start. In the logs I see that it starts, but no error code or something.

              I don't know if I have set an interface. Where can I set that?

              this is the only line I see in the system logs:
              Knipsel.PNG

              When I try to activate it via shell, it says it's allready enabled...
              Knipsel.PNG

              GertjanG 1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan @gwabber
                last edited by

                @gwabber said in SSHD won't start:

                I don't know if I have set an interface. Where can I set that?

                No need to select or set an interface.
                The sshd daemon will bind to all interfaces.

                Btw : what does

                ps ax | grep 'sshd'
                

                tell you if sshd running.

                16241  -  Ss      0:00.04 sshd: root@pts/0 (sshd)
                49108  -  Ss      0:00.00 sshd: /usr/sbin/sshd [listener] 0 of 10-100 startups
                
                sockstat
                

                or

                sockstat | grep 'sshd'
                

                shows also some info.
                If 192.168.1.1 is the LAN interface of pfSense, you could also test with :

                ssh 192.168.1.1
                

                @gwabber said in SSHD won't start:

                Ben je ook Nederlands / Are you Dutch too? ;)

                Yep.

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                G 1 Reply Last reply Reply Quote 0
                • G
                  gwabber @Gertjan
                  last edited by gwabber

                  @gertjan

                  Not much to work with I guess... :
                  Knipsel.PNG

                  I can't access it from the standard interface, the connection times out.

                  G 1 Reply Last reply Reply Quote 0
                  • G
                    gwabber @gwabber
                    last edited by

                    Could it have something to do with the fact that it is an backup on new hardware?

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @gwabber
                      last edited by

                      @gwabber did you try just disable and then enable it again.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      G 1 Reply Last reply Reply Quote 0
                      • G
                        gwabber @johnpoz
                        last edited by

                        @johnpoz yeah i did haha

                        1 Reply Last reply Reply Quote 0
                        • G
                          gwabber
                          last edited by

                          i've been diggin in the forums. I rembered that a couple of days ago, I rebooted my pfsense and I read back the Telegram backups it gave me.

                          One of them said it was regenerating SSH keys.

                          That way I came across this topic with someone with the same problem as I had:
                          https://forum.netgate.com/topic/79400/error-after-upgrade-to-2-2-release-sshd-secure-shell-daemon-doesn-t-start/7

                          now I was able to regenerate according to the commands that were given in that topic, but now i get this error:
                          Knipsel.PNG

                          G 1 Reply Last reply Reply Quote 0
                          • G
                            gwabber @gwabber
                            last edited by

                            @gwabber allright...

                            apparently it works now. I ignored the error and tried to SSH in. I was able to do that, but I don't know what the error means...

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @gwabber
                              last edited by

                              so you just started the sshd directly from the cmd line without any parameters or config..

                              let it start the normal way.. I would kill of any sshd processes and disable and enable it via the gui, or the console.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              G 1 Reply Last reply Reply Quote 0
                              • G
                                gwabber @johnpoz
                                last edited by

                                @johnpoz Well, after I regenerated the SSH key's the way the OP from the other topic did it. Also in de GUI everything is running again and I can SSH into the firewall.

                                Thanks for your help guys!

                                GertjanG 1 Reply Last reply Reply Quote 0
                                • GertjanG
                                  Gertjan @gwabber
                                  last edited by Gertjan

                                  @gwabber

                                  2ec7a9f9-075b-4c59-81fb-a534c8d8fc8e-image.png

                                  If that file didn't exist, I would hit the big red button called "system not to be trusted" as these files :

                                  0b570ff5-2b1c-44a6-8704-da3a35d36e2f-image.png

                                  are created upon system (pfSense) install.

                                  The real question is now : **what else has not been created and or not put in place ** ?

                                  And yes, the sshd deamon will silently fail if the basic config isn't present.
                                  I was about to propose : make the sshd system start way more verbose by editing /etc/ssh/sshd_config by adding a line with "Verbose" (something like that).

                                  Anyway : Succes verder.

                                  No "help me" PM's please. Use the forum, the community will thank you.
                                  Edit : and where are the logs ??

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.