Unable to SSH into Windows Domain server using Domain User

[I1eoThe0ne]

"OpenSSH for Windows" version
OpenSSH_for_Windows_8.1p1, LibreSSL 2.9.2

Server OperatingSystem
Windows Server 2019 Standard

Client OperatingSystem
Windows 10

What is failing
SSH Connection does not esablish - it does not even ask for password or key-files

Expected output
successfull connection

Actual output

Server : fatal: ga_init, unable to resolve user ourDomain\myDomainUser

Client: Connection reset by 10.70.108.76 port 22

client.log
server.log

[bagajjal]

@I1eoThe0ne - Can you share the output of "whoami /user" on cmd.exe.
Looking at the log file, OpenSSHServer is unable to generate user token..
error 0xC000006D - The attempted logon is invalid. This is either due to a bad username or authentication information.

4216 2021-06-30 18:00:48.875 debug1: generate_s4u_user_token: LsaLogonUser() failed. User 'ourDomain\myDomainUser' Status: 0xC000006D SubStatus 0.
4216 2021-06-30 18:00:48.875 debug3: get_user_token - unable to generate token for user ourDomain\myDomainUser

[akshay8043]

Hi,

Even I am also unable to configure OpenSSH service using domain account.

Do you know how to run openssh using service account and how to change root/home folder for ssh?

[I1eoThe0ne]

@I1eoThe0ne - Can you share the output of "whoami /user" on cmd.exe.
Looking at the log file, OpenSSHServer is unable to generate user token..
error 0xC000006D - The attempted logon is invalid. This is either due to a bad username or authentication information.

4216 2021-06-30 18:00:48.875 debug1: generate_s4u_user_token: LsaLogonUser() failed. User 'ourDomain\myDomainUser' Status: 0xC000006D SubStatus 0.
4216 2021-06-30 18:00:48.875 debug3: get_user_token - unable to generate token for user ourDomain\myDomainUser

@bagajjal the open-ssh-server is started as a service (services.msc)
In the logOn Tab "Local System Account" is checked.

I did start it once as user ourDomain\myDomainUser - from the terminal - then it works. But in production I can not start the service using ourDomain.

[bagajjal]

@I1eoThe0ne - How did you install the openssh server? Have you made any installation changes?
Please provide the requested information in the previous post also

[I1eoThe0ne]

@bagajjal

• I did share the previous requested information - what are you missing??
• Yes I did install the openssh server
• No I did not make any changes

Solution

The computer did not have the rights to reads the desired users Properties - therefore ssh failed with the error message mentioned above.

Giving the Computer permissions to read the properties of the user (ourDomain\myDomainUser) solved the issue - Login is successful :)

For more details view Unable to SSH into Windows Domain server using Domain User

[realslacker]

I know this is closed, but is there any kind of list of properties that the computer account needs read access to? I have a fairly locked down environment, and I would like to scope this down as much as possible vs. just giving all servers with OpenSSH installed wide open read access to all user accounts.