Symptom

Conditions

Here is ssh config for reference from TB DC7-KP-FPR2130-ASA/act(config)# sh run ssh ssh stricthostkeycheck ssh pubkey-chain server 10.197.82.66 key-hash sha256 01:97:30:b5:17:66:02:c6:4c:9e:e1:44:6f:e7:92:2a:f6:60:87:c1:15:71:96:31:2d:db:d0:f9:04:3d:77:84 ssh timeout 5 ssh key-exchange group dh-group14-sha256 ssh 0.0.0.0 0.0.0.0 management DC7-KP-FPR2130-ASA/act(config)# sh run | in ssh aaa authentication ssh console LOCAL ssh stricthostkeycheck ssh pubkey-chain ssh timeout 5 ssh key-exchange group dh-group14-sha256 ssh 0.0.0.0 0.0.0.0 management DC7-KP-FPR2130-ASA/act(config)#

Workaround

Further Problem Description

Captured below debugs while trying ssh when username is ci$co, password is cisco123 DC7-KP-FPR2130-ASA/act(config)# debug ssh 255 debug ssh enabled at level 255 DC7-KP-FPR2130-ASA/act(config)# SSH_EXT: Received a syslog messageSSH_EXT: Received a syslog messageSSH_EXT: Received a syslog messageSSH_EXT: Disconnect/Read Error on fd: 1898344730 SSH_EXT: 512 session found fd 1898344730 releasing res-mgr vcid: 0 sess-id: 512 client: 192.168.0.176:54546 process id: 39549 SSH_EXT: Freeing proc type 2 SSH_EXT: received username sshd for vcid 0 SSH_EXT: Sucessfully packed passwd info for userid sshd for vcid 0 SSH_EXT: NSS request processed SSH_EXT: Response send len 36 SSH_EXT: Disconnect/Read Error on fd: 290219686 SSH_EXT: flow lookup on vPifNum 2 SSH_EXT: flow lookup for 192.168.17.170:22192.168.0.176:54548 SSH_EXT: found the flow SSH_EXT: connection on vPif management SSH_EXT: Registering external ssh/sshd SSH_EXT: vcid 0, Process type 2 SSH_EXT: Getting new session for vcid 0 SSH_EXT: Added new vPifNum_node 2 ssh_ext: session added for 192.168.17.170:4122192.168.0.176:54548 ssh_ext: session registerd id: 513 fd: 484191590 process-id: 40798 SSH_EXT: Response send len 16 SSH_EXT: updating hostkey algorithm for session id 513 fd 484191590 SSH_EXT: Hostkey algorithm ssh-rsa SSH_EXT: updating Encryption algorithm for session id 513 fd 484191590 SSH_EXT: Encryption algorithm chacha20-poly1305@openssh.com mode 1 SSH_EXT: updating hostkey algorithm for session id 513 fd 484191590 SSH_EXT: Hostkey algorithm ssh-rsa SSH_EXT: updating Encryption algorithm for session id 513 fd 484191590 SSH_EXT: Encryption algorithm chacha20-poly1305@openssh.com mode 1 SSH_EXT: updating Encryption algorithm for session id 513 fd 484191590 SSH_EXT: Encryption algorithm chacha20-poly1305@openssh.com mode 2 SSH_EXT: received username ci for vcid 0 SSH_EXT: Sucessfully packed passwd info for userid ci for vcid 0 SSH_EXT: NSS request processed SSH_EXT: Response send len 34 SSH_EXT: updating ci user for session id 513 fd 484191590 SSH_EXT: ci user updated successfully for session id 513 SSH_EXT: Disconnect/Read Error on fd: 1117130994 SSH_EXT: received username ci for vcid 0 SSH_EXT: Sucessfully packed passwd info for userid ci for vcid 0 SSH_EXT: NSS request processed SSH_EXT: Response send len 34 SSH_EXT: Disconnect/Read Error on fd: 754693670 SSH_EXT: Processing PAM SSH_EXT: Authenticating username ci for vcid 0 SSH_EXT: Authenticating userid ci vcid 0 SSH_EXT: Authentication failed for userid ci vcid 0 SSH_EXT: PAM request processed SSH_EXT: Response send len 4 SSH_EXT: Disconnect/Read Error on fd: 438648354