From nobody@FreeBSD.org  Sun Oct 16 15:50:41 2011
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 9279E106564A
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 16 Oct 2011 15:50:41 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22])
	by mx1.freebsd.org (Postfix) with ESMTP id 68BD38FC0A
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 16 Oct 2011 15:50:41 +0000 (UTC)
Received: from red.freebsd.org (localhost [127.0.0.1])
	by red.freebsd.org (8.14.4/8.14.4) with ESMTP id p9GFoe8e039111
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 16 Oct 2011 15:50:40 GMT
	(envelope-from nobody@red.freebsd.org)
Received: (from nobody@localhost)
	by red.freebsd.org (8.14.4/8.14.4/Submit) id p9GFoeMj039110;
	Sun, 16 Oct 2011 15:50:40 GMT
	(envelope-from nobody)
Message-Id: <201110161550.p9GFoeMj039110@red.freebsd.org>
Date: Sun, 16 Oct 2011 15:50:40 GMT
From: John Blazek <freebsd.org@logicalsolutns.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: SSHD starts on boot even if  sshd_enable="NO" in 8.2
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         161714
>Category:       conf
>Synopsis:       SSHD starts on boot even if sshd_enable="NO" in 8.2
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-rc
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Oct 16 16:00:23 UTC 2011
>Closed-Date:    Sun Oct 16 22:38:23 UTC 2011
>Last-Modified:  Sun Oct 16 22:38:23 UTC 2011
>Originator:     John Blazek
>Release:        8.2
>Organization:
>Environment:
>Description:
Followup to previous report:

After tracking this down further, it appears to be directly related to an entry in /etc/rc.local

/usr/sbin/sshd -p 22200


This entry is intended to start a separate instance of sshd for administrator access.

When this entry is commented out with hash #, no sshd process starts.
When the hash is removed, sshd starts on both port 22200 and port 9991


*BOOTED WITH #/usr/sbin/sshd -p 22200  in rc.local
[root@kahlua]:[~]# cat /etc/rc.local
#/usr/sbin/sshd -p 22200
sysctl kern.securelevel=2



result: no sshd running. inetd listening on 2220

[root@kahlua]:[~]# sockstat | grep ssh
[root@kahlua]:[~]# sockstat | grep 2220
root     inetd      45432 5  tcp4   *:2220                *:*
[root@kahlua]:[~]#


Then manually executing the command starts sshd as expected:

[root@kahlua]:[~]# /usr/sbin/sshd -p 22200
[root@kahlua]:[~]# sockstat | grep ssh
root     sshd       56999 3  tcp6   *:22200               *:*
root     sshd       56999 4  tcp4   *:22200               *:*
[root@kahlua]:[~]#


*************************************************************************

Removed Hash from rc.local, to start copy of ssh on port 22200

[root@kahlua]:[~]# cat /etc/rc.local
/usr/sbin/sshd -p 22200
sysctl kern.securelevel=2
[root@kahlua]:[~]#


This resulted in an 'extra' copy of sshd starting (using the flag -p 9991 from rc.conf)

[root@kahlua]:[~]# cat /etc/rc.conf | grep ssh
# sshd is controlleb by inetd
sshd_enable="NO"
sshd_flags="-p 9991"


[root@kahlua]:[~]# sockstat | grep ssh
root     sshd       33493 3  tcp6   *:9991                *:*
root     sshd       33493 4  tcp4   *:9991                *:*
root     sshd       7532  3  tcp6   *:22200               *:*
root     sshd       7532  4  tcp4   *:22200               *:*

[root@kahlua]:[~]# sockstat | grep 2220
root     inetd      49601 5  tcp4   *:2220                *:*
root     sshd       7532  3  tcp6   *:22200               *:*
root     sshd       7532  4  tcp4   *:22200               *:*

>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: linimon 
State-Changed-When: Sun Oct 16 22:37:05 UTC 2011 
State-Changed-Why:  
Misfiled followup to conf/161710; content migrated. 


Responsible-Changed-From-To: freebsd-bugs->freebsd-rc 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Sun Oct 16 22:37:05 UTC 2011 
Responsible-Changed-Why:  

http://www.freebsd.org/cgi/query-pr.cgi?pr=161714 
>Unformatted:
