SOLVED Reboot required for ssh access?

[DavidinGA]

I just checked the box in TrueNAS-SCALE to activate SSH.

Port 22 SSH access is being denied.

Do I need to reboot the server for SSH access to be permitted?

Thanks

 

[danb35]

Do I need to reboot the server for SSH access to be permitted?

No, it should be effective immediately. Have you enabled root login (using passwords, if appropriate)?

 

[DavidinGA]

 

[DavidinGA]

 

[danb35]

...and you've turned on the service?

 

[DavidinGA]

Ha! I toggled on the Start Automatically and didn't even notice I had to also toggle on SSH manually - I'd have coded Start Automatically to check and automatically turn on SSH - saving the user a step. I cannot think of a use case where that would not make sense.

 

[DavidinGA]

I take it that I can't ssh in as root?
So many unclear selections in Add User setup ...
I'm supposed to know the "default port number used by the service", how?
It has the field to make the Primary Group disabled - so I can't make it "wheel". Sigh.
Figured out I needed to uncheck New Primary Group - but "wheel" isn't a Primary Group Option.
Chose "users" as Primary and "ssh" as Auxiliary and checked "Permit Sudo"
It's unclear if I need to "Download SSH Public Key" - so I didn't ...

Help: User ID​

User accounts have an ID greater than 1000 and system accounts have an ID equal to the default port number used by the service.

Help: Primary Group​

New users are not given su permissions if wheel is their primary group.

 

[danb35]

I take it that I can't ssh in as root?

Where do you get that idea from?

I'm supposed to know the "default port number used by the service", how?

That's for system accounts (i.e., the accounts that run services like nginx or mysql), not for user accounts--as it says in the tooltip help you quoted.

Figured out I needed to uncheck New Primary Group - but "wheel" isn't a Primary Group Option.

Ordinarily you should leave that checked; a new user will be placed in a new primary group with the same name as the user. You can add wheel as an aux group if desired. I can't imagine why you'd set the aux group to ssh.

It's unclear if I need to "Download SSH Public Key" - so I didn't ...

If you don't see a need for it, then don't--you can do it later in the unlikely event you need to.

Edit: A lot of this is discussed in the docs--have you checked there?

Local Users |

Local Users

www.truenas.com

 

[DavidinGA]

Edit: A lot of this is discussed in the docs--have you checked there?

Local Users |

Local Users

www.truenas.com

My general practice is to try a search of the docs, the forum, and the Internet in general. Only when I don't see, or don't understand, what I find do I ask here. (I'm often interrupted and in a hurry and probably miss things that a quiet and slow reading may reveal. It may be age 67 showing a little as well ...)

 

[neofusion]

Ha! I toggled on the Start Automatically and didn't even notice I had to also toggle on SSH manually - I'd have coded Start Automatically to check and automatically turn on SSH - saving the user a step. I cannot think of a use case where that would not make sense.

I rather retain the power of being able to precisely select when I open a service instead of things being automated in such a way. Wanting things to happen after a reboot and not before is not exactly unusual.

Having a followup question after selecting "Start Automatically" that asks if the user wants to start it right away is an acceptable compromise.