GET https://kbin.spritesserver.nl/index.php/u/@starkzarn@infosec.pub/commented/2023-11-10::2023-11-10

Response
200 OK
IP
216.73.216.108
Profiled on
Token
24e3e7

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 15.16 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.07 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
Proxies\__CG__\App\Entity\Entry {#1582
  +user: Proxies\__CG__\App\Entity\User {#2463 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2026 …}
  +slug: "Have-I-successfully-blocked-ssh-logins-to-root"
  +title: "Have I successfully blocked ssh logins to root?"
  +url: null
  +body: """
    I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would’ve thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended?\n
    \n
    What I’ve done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default.\n
    \n
    Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 20
  +favouriteCount: 36
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699784052 {#1722
    date: 2023-11-12 11:14:12.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2032 …}
  +votes: Doctrine\ORM\PersistentCollection {#2023 …}
  +reports: Doctrine\ORM\PersistentCollection {#1362 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2085 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2076 …}
  +badges: Doctrine\ORM\PersistentCollection {#2091 …}
  +children: [
    App\Entity\EntryComment {#1709
      +user: App\Entity\User {#264 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1582 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
      +image: null
      +parent: null
      +root: null
      +body: "That all sounds correct to me. The random port you’re seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 12
      +score: 0
      +lastActive: DateTime @1699731832 {#1435
        date: 2023-11-11 20:43:52.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyberwolfie@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1572 …}
      +nested: Doctrine\ORM\PersistentCollection {#1581 …}
      +votes: Doctrine\ORM\PersistentCollection {#1579 …}
      +reports: Doctrine\ORM\PersistentCollection {#1577 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1573 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1650 …}
      -id: 107858
      -bodyTs: "'common':30 'correct':4 'ephemer':25 'good':35 'high':18 'log':15 'often':20 'port':9,19,26,33 'random':8 're':11 'refer':21 'see':12 'sound':3 'sourc':32"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://infosec.pub/comment/4119380"
      +editedAt: null
      +createdAt: DateTimeImmutable @1699629642 {#1438
        date: 2023-11-10 16:20:42.0 +01:00
      }
      +"title": 107858
    }
  ]
  -id: 11766
  -titleTs: "'block':4 'login':6 'root':8 'ssh':5 'success':3"
  -bodyTs: "'/etc/ssh/sshd_config':65 '/var/log/auth.log':41 'attempt':79 'believ':7 'bonus':75 'cannot':23 'config':69 'correct':20 'default':74 'disabl':10 'done':19,56 'entri':49 'even':89 'fail':47 'file':70 'go':84 'instead':42 'intend':52 'left':72 'line':63 'login':12,24,78,93 'password':48 'permitrootlogin':61 'port':88 'question':76 'random':87 'reflect':39 'rest':66 'root':11,26 'seem':82 'server':4 'show':44 'ssh':14,29,81 'success':92 'think':16 'thought':34 'uncom':59 've':33,55 'via':13,28 'would':32,37"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699715739
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/7770730"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699629339 {#1696
    date: 2023-11-10 16:15:39.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
Proxies\__CG__\App\Entity\Entry {#1582
  +user: Proxies\__CG__\App\Entity\User {#2463 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2026 …}
  +slug: "Have-I-successfully-blocked-ssh-logins-to-root"
  +title: "Have I successfully blocked ssh logins to root?"
  +url: null
  +body: """
    I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would’ve thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended?\n
    \n
    What I’ve done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default.\n
    \n
    Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 20
  +favouriteCount: 36
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699784052 {#1722
    date: 2023-11-12 11:14:12.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2032 …}
  +votes: Doctrine\ORM\PersistentCollection {#2023 …}
  +reports: Doctrine\ORM\PersistentCollection {#1362 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2085 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2076 …}
  +badges: Doctrine\ORM\PersistentCollection {#2091 …}
  +children: [
    App\Entity\EntryComment {#1709
      +user: App\Entity\User {#264 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1582 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
      +image: null
      +parent: null
      +root: null
      +body: "That all sounds correct to me. The random port you’re seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 12
      +score: 0
      +lastActive: DateTime @1699731832 {#1435
        date: 2023-11-11 20:43:52.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyberwolfie@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1572 …}
      +nested: Doctrine\ORM\PersistentCollection {#1581 …}
      +votes: Doctrine\ORM\PersistentCollection {#1579 …}
      +reports: Doctrine\ORM\PersistentCollection {#1577 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1573 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1650 …}
      -id: 107858
      -bodyTs: "'common':30 'correct':4 'ephemer':25 'good':35 'high':18 'log':15 'often':20 'port':9,19,26,33 'random':8 're':11 'refer':21 'see':12 'sound':3 'sourc':32"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://infosec.pub/comment/4119380"
      +editedAt: null
      +createdAt: DateTimeImmutable @1699629642 {#1438
        date: 2023-11-10 16:20:42.0 +01:00
      }
      +"title": 107858
    }
  ]
  -id: 11766
  -titleTs: "'block':4 'login':6 'root':8 'ssh':5 'success':3"
  -bodyTs: "'/etc/ssh/sshd_config':65 '/var/log/auth.log':41 'attempt':79 'believ':7 'bonus':75 'cannot':23 'config':69 'correct':20 'default':74 'disabl':10 'done':19,56 'entri':49 'even':89 'fail':47 'file':70 'go':84 'instead':42 'intend':52 'left':72 'line':63 'login':12,24,78,93 'password':48 'permitrootlogin':61 'port':88 'question':76 'random':87 'reflect':39 'rest':66 'root':11,26 'seem':82 'server':4 'show':44 'ssh':14,29,81 'success':92 'think':16 'thought':34 'uncom':59 've':33,55 'via':13,28 'would':32,37"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699715739
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/7770730"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699629339 {#1696
    date: 2023-11-10 16:15:39.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
Proxies\__CG__\App\Entity\Entry {#1582
  +user: Proxies\__CG__\App\Entity\User {#2463 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2026 …}
  +slug: "Have-I-successfully-blocked-ssh-logins-to-root"
  +title: "Have I successfully blocked ssh logins to root?"
  +url: null
  +body: """
    I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would’ve thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended?\n
    \n
    What I’ve done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default.\n
    \n
    Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 20
  +favouriteCount: 36
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1699784052 {#1722
    date: 2023-11-12 11:14:12.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2032 …}
  +votes: Doctrine\ORM\PersistentCollection {#2023 …}
  +reports: Doctrine\ORM\PersistentCollection {#1362 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2085 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2076 …}
  +badges: Doctrine\ORM\PersistentCollection {#2091 …}
  +children: [
    App\Entity\EntryComment {#1709
      +user: App\Entity\User {#264 …}
      +entry: Proxies\__CG__\App\Entity\Entry {#1582 …2}
      +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
      +image: null
      +parent: null
      +root: null
      +body: "That all sounds correct to me. The random port you’re seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there."
      +lang: "en"
      +isAdult: false
      +favouriteCount: 12
      +score: 0
      +lastActive: DateTime @1699731832 {#1435
        date: 2023-11-11 20:43:52.0 +01:00
      }
      +ip: null
      +tags: null
      +mentions: [
        "@cyberwolfie@lemmy.ml"
      ]
      +children: Doctrine\ORM\PersistentCollection {#1572 …}
      +nested: Doctrine\ORM\PersistentCollection {#1581 …}
      +votes: Doctrine\ORM\PersistentCollection {#1579 …}
      +reports: Doctrine\ORM\PersistentCollection {#1577 …}
      +favourites: Doctrine\ORM\PersistentCollection {#1573 …}
      +notifications: Doctrine\ORM\PersistentCollection {#1650 …}
      -id: 107858
      -bodyTs: "'common':30 'correct':4 'ephemer':25 'good':35 'high':18 'log':15 'often':20 'port':9,19,26,33 'random':8 're':11 'refer':21 'see':12 'sound':3 'sourc':32"
      +ranking: 0
      +commentCount: 0
      +upVotes: 0
      +downVotes: 0
      +visibility: "visible             "
      +apId: "https://infosec.pub/comment/4119380"
      +editedAt: null
      +createdAt: DateTimeImmutable @1699629642 {#1438
        date: 2023-11-10 16:20:42.0 +01:00
      }
      +"title": 107858
    }
  ]
  -id: 11766
  -titleTs: "'block':4 'login':6 'root':8 'ssh':5 'success':3"
  -bodyTs: "'/etc/ssh/sshd_config':65 '/var/log/auth.log':41 'attempt':79 'believ':7 'bonus':75 'cannot':23 'config':69 'correct':20 'default':74 'disabl':10 'done':19,56 'entri':49 'even':89 'fail':47 'file':70 'go':84 'instead':42 'intend':52 'left':72 'line':63 'login':12,24,78,93 'password':48 'permitrootlogin':61 'port':88 'question':76 'random':87 'reflect':39 'rest':66 'root':11,26 'seem':82 'server':4 'show':44 'ssh':14,29,81 'success':92 'think':16 'thought':34 'uncom':59 've':33,55 'via':13,28 'would':32,37"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1699715739
  +visibility: "visible             "
  +apId: "https://lemmy.ml/post/7770730"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699629339 {#1696
    date: 2023-11-10 16:15:39.0 +01:00
  }
  +__isInitialized__: true
   …2
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#1709
  +user: App\Entity\User {#264 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1582
    +user: Proxies\__CG__\App\Entity\User {#2463 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2026 …}
    +slug: "Have-I-successfully-blocked-ssh-logins-to-root"
    +title: "Have I successfully blocked ssh logins to root?"
    +url: null
    +body: """
      I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would’ve thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended?\n
      \n
      What I’ve done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default.\n
      \n
      Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699784052 {#1722
      date: 2023-11-12 11:14:12.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2032 …}
    +votes: Doctrine\ORM\PersistentCollection {#2023 …}
    +reports: Doctrine\ORM\PersistentCollection {#1362 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2085 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2076 …}
    +badges: Doctrine\ORM\PersistentCollection {#2091 …}
    +children: [
      App\Entity\EntryComment {#1709}
    ]
    -id: 11766
    -titleTs: "'block':4 'login':6 'root':8 'ssh':5 'success':3"
    -bodyTs: "'/etc/ssh/sshd_config':65 '/var/log/auth.log':41 'attempt':79 'believ':7 'bonus':75 'cannot':23 'config':69 'correct':20 'default':74 'disabl':10 'done':19,56 'entri':49 'even':89 'fail':47 'file':70 'go':84 'instead':42 'intend':52 'left':72 'line':63 'login':12,24,78,93 'password':48 'permitrootlogin':61 'port':88 'question':76 'random':87 'reflect':39 'rest':66 'root':11,26 'seem':82 'server':4 'show':44 'ssh':14,29,81 'success':92 'think':16 'thought':34 'uncom':59 've':33,55 'via':13,28 'would':32,37"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699715739
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/7770730"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699629339 {#1696
      date: 2023-11-10 16:15:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
  +image: null
  +parent: null
  +root: null
  +body: "That all sounds correct to me. The random port you’re seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1699731832 {#1435
    date: 2023-11-11 20:43:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@cyberwolfie@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1572 …}
  +nested: Doctrine\ORM\PersistentCollection {#1581 …}
  +votes: Doctrine\ORM\PersistentCollection {#1579 …}
  +reports: Doctrine\ORM\PersistentCollection {#1577 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1573 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1650 …}
  -id: 107858
  -bodyTs: "'common':30 'correct':4 'ephemer':25 'good':35 'high':18 'log':15 'often':20 'port':9,19,26,33 'random':8 're':11 'refer':21 'see':12 'sound':3 'sourc':32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://infosec.pub/comment/4119380"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699629642 {#1438
    date: 2023-11-10 16:20:42.0 +01:00
  }
  +"title": 107858
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#1709
  +user: App\Entity\User {#264 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1582
    +user: Proxies\__CG__\App\Entity\User {#2463 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2026 …}
    +slug: "Have-I-successfully-blocked-ssh-logins-to-root"
    +title: "Have I successfully blocked ssh logins to root?"
    +url: null
    +body: """
      I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would’ve thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended?\n
      \n
      What I’ve done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default.\n
      \n
      Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699784052 {#1722
      date: 2023-11-12 11:14:12.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2032 …}
    +votes: Doctrine\ORM\PersistentCollection {#2023 …}
    +reports: Doctrine\ORM\PersistentCollection {#1362 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2085 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2076 …}
    +badges: Doctrine\ORM\PersistentCollection {#2091 …}
    +children: [
      App\Entity\EntryComment {#1709}
    ]
    -id: 11766
    -titleTs: "'block':4 'login':6 'root':8 'ssh':5 'success':3"
    -bodyTs: "'/etc/ssh/sshd_config':65 '/var/log/auth.log':41 'attempt':79 'believ':7 'bonus':75 'cannot':23 'config':69 'correct':20 'default':74 'disabl':10 'done':19,56 'entri':49 'even':89 'fail':47 'file':70 'go':84 'instead':42 'intend':52 'left':72 'line':63 'login':12,24,78,93 'password':48 'permitrootlogin':61 'port':88 'question':76 'random':87 'reflect':39 'rest':66 'root':11,26 'seem':82 'server':4 'show':44 'ssh':14,29,81 'success':92 'think':16 'thought':34 'uncom':59 've':33,55 'via':13,28 'would':32,37"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699715739
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/7770730"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699629339 {#1696
      date: 2023-11-10 16:15:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
  +image: null
  +parent: null
  +root: null
  +body: "That all sounds correct to me. The random port you’re seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1699731832 {#1435
    date: 2023-11-11 20:43:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@cyberwolfie@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1572 …}
  +nested: Doctrine\ORM\PersistentCollection {#1581 …}
  +votes: Doctrine\ORM\PersistentCollection {#1579 …}
  +reports: Doctrine\ORM\PersistentCollection {#1577 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1573 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1650 …}
  -id: 107858
  -bodyTs: "'common':30 'correct':4 'ephemer':25 'good':35 'high':18 'log':15 'often':20 'port':9,19,26,33 'random':8 're':11 'refer':21 'see':12 'sound':3 'sourc':32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://infosec.pub/comment/4119380"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699629642 {#1438
    date: 2023-11-10 16:20:42.0 +01:00
  }
  +"title": 107858
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#1709
  +user: App\Entity\User {#264 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1582
    +user: Proxies\__CG__\App\Entity\User {#2463 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2026 …}
    +slug: "Have-I-successfully-blocked-ssh-logins-to-root"
    +title: "Have I successfully blocked ssh logins to root?"
    +url: null
    +body: """
      I have a server where I believe I have disabled root login via ssh. I think it is done correctly, as I cannot login with root myself via ssh, but I would’ve thought that it would be reflected in `/var/log/auth.log`. Instead, it shows up as failed password entry. Is this intended?\n
      \n
      What I’ve done is to uncomment the `PermitRootLogin no` line in `/etc/ssh/sshd_config`. Rest of the config file is left at default.\n
      \n
      Bonus question: All login attempts by ssh seems to go over some random port (even my own successful logins). Why is this?
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 36
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1699784052 {#1722
      date: 2023-11-12 11:14:12.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2032 …}
    +votes: Doctrine\ORM\PersistentCollection {#2023 …}
    +reports: Doctrine\ORM\PersistentCollection {#1362 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2085 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2076 …}
    +badges: Doctrine\ORM\PersistentCollection {#2091 …}
    +children: [
      App\Entity\EntryComment {#1709}
    ]
    -id: 11766
    -titleTs: "'block':4 'login':6 'root':8 'ssh':5 'success':3"
    -bodyTs: "'/etc/ssh/sshd_config':65 '/var/log/auth.log':41 'attempt':79 'believ':7 'bonus':75 'cannot':23 'config':69 'correct':20 'default':74 'disabl':10 'done':19,56 'entri':49 'even':89 'fail':47 'file':70 'go':84 'instead':42 'intend':52 'left':72 'line':63 'login':12,24,78,93 'password':48 'permitrootlogin':61 'port':88 'question':76 'random':87 'reflect':39 'rest':66 'root':11,26 'seem':82 'server':4 'show':44 'ssh':14,29,81 'success':92 'think':16 'thought':34 'uncom':59 've':33,55 'via':13,28 'would':32,37"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1699715739
    +visibility: "visible             "
    +apId: "https://lemmy.ml/post/7770730"
    +editedAt: null
    +createdAt: DateTimeImmutable @1699629339 {#1696
      date: 2023-11-10 16:15:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1574 …}
  +image: null
  +parent: null
  +root: null
  +body: "That all sounds correct to me. The random port you’re seeing in the logs is a high port, often referred to as an ephemeral port, and it is common for source ports. All good there."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1699731832 {#1435
    date: 2023-11-11 20:43:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@cyberwolfie@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#1572 …}
  +nested: Doctrine\ORM\PersistentCollection {#1581 …}
  +votes: Doctrine\ORM\PersistentCollection {#1579 …}
  +reports: Doctrine\ORM\PersistentCollection {#1577 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1573 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1650 …}
  -id: 107858
  -bodyTs: "'common':30 'correct':4 'ephemer':25 'good':35 'high':18 'log':15 'often':20 'port':9,19,26,33 'random':8 're':11 'refer':21 'see':12 'sound':3 'sourc':32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://infosec.pub/comment/4119380"
  +editedAt: null
  +createdAt: DateTimeImmutable @1699629642 {#1438
    date: 2023-11-10 16:20:42.0 +01:00
  }
  +"title": 107858
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_ADMIN 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED ROLE_MODERATOR 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details