I see this in a more verbose auth.log: Jul 3 15:10:50 localhost sshd[29078]: Received disconnect from $ip: 11: disconnected by user Jul 3 15:10:50 localhost sshd[29078]: pam_unix(sshd:session): session closed for user root Jul 3 15:10:56 localhost sshd[22251]: Set /proc/self/oom_score_adj to 0 Jul 3 15:10:56 localhost sshd[22251]: Connection from $ip port 42326 Jul 3 15:10:56 localhost sshd[22251]: SSH: Server;Ltype: Version;Remote: 192.168.2.10-42326;Protocol: 2.0;Client: OpenSSH Jul 3 15:10:56 localhost sshd[22251]: SSH: Server;Ltype: Kex;Remote: 192.168.2.10-42326;Enc: aes128-ctr;MAC: hmac-md5;Comp: none [preauth] Jul 3 15:10:56 localhost sshd[22251]: SSH: Server;Ltype: Authname;Remote: 192.168.2.10-42326;Name: root [preauth] Jul 3 15:10:56 localhost sshd[22251]: PAM unable to dlopen(/lib64/security/pam_mktemp.so): /lib64/security/pam_mktemp.so: cannot open shared object file: No such file or directory Jul 3 15:10:56 localhost sshd[22251]: PAM adding faulty module: /lib64/security/pam_mktemp.so Jul 3 15:10:56 localhost sshd[22251]: Found matching RSA key: c7:2f:62:58:a5:c0:5c:18:27:2a:6a:d7:ef:25:9f:b7 Jul 3 15:10:56 localhost sshd[22251]: Postponed publickey for root from 192.168.2.10 port 42326 ssh2 [preauth] Jul 3 15:10:56 localhost sshd[22251]: Found matching RSA key: c7:2f:62:58:a5:c0:5c:18:27:2a:6a:d7:ef:25:9f:b7 Jul 3 15:10:56 localhost sshd[22251]: Accepted publickey for root from $ip port 42326 ssh2 Jul 3 15:10:56 localhost sshd[22251]: pam_unix(sshd:session): session opened for user root by (uid=0) After merging pam_mktemp there are no warnings
Make sure your pambase is set up properly and you did update with etc-update the files.
yeah, there was mktemp in pambase configuration. apologize
