[pjb@despina org.macports:0 sources]$ sudo /opt/ianalyse-test/bin/run-sshd
sudo /opt/ianalyse-test/bin/run-sshd
debug2: load_server_config: filename /opt/ianalyse-test/etc/ssh/sshd_config
debug2: load_server_config: done config len = 1944
debug2: parse_server_config: config /opt/ianalyse-test/etc/ssh/sshd_config len 1944
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:14 setting Port 8873
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:23 setting HostKey /opt/ianalyse-test/etc/ssh/ssh_host_ed25519_key
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:28 setting HostbasedAuthentication no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:32 setting IgnoreUserKnownHosts yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:35 setting IgnoreRhosts yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:45 setting SyslogFacility AUTH
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:46 setting LogLevel INFO
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:49 setting LoginGraceTime 30s
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:50 setting PermitRootLogin no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:51 setting StrictModes yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:52 setting MaxAuthTries 3
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:53 setting MaxSessions 3
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:55 setting PubkeyAuthentication yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:56 setting PubkeyAcceptedKeyTypes ssh-ed25519,ssh-ed25519-cert-v01@openssh.com
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:65 setting AuthorizedKeysFile none
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:66 setting AuthorizedKeysCommand /opt/ianalyse-test/libexec/authorized-key-from-pg %u %t %k
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:67 setting AuthorizedKeysCommandUser ianalyse-test
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:69 setting RevokedKeys /opt/ianalyse-test/etc/ssh/revoked_keys
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:71 setting AuthorizedPrincipalsFile none
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:77 setting PasswordAuthentication no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:78 setting PermitEmptyPasswords no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:80 setting KbdInteractiveAuthentication no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:104 setting UsePAM no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:106 setting AllowAgentForwarding no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:107 setting AllowStreamLocalForwarding no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:108 setting AllowTcpForwarding no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:110 setting AllowUsers ian-*
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:111 setting ChrootDirectory /Users/ianalyse-test/data/%u
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:113 setting AuthenticationMethods publickey
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:116 setting DisableForwarding yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:117 setting GatewayPorts no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:118 setting X11Forwarding no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:119 setting X11UseLocalhost no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:120 setting XAuthLocation none
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:122 setting Compression yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:124 setting ClientAliveInterval 6
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:125 setting ClientAliveCountMax 5
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:127 setting PermitTTY no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:128 setting PrintMotd no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:129 setting PrintLastLog no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:130 setting TCPKeepAlive yes
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:132 setting PermitUserEnvironment no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:133 setting PermitUserRC no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:136 setting UseDNS no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:137 setting PidFile /var/run/ianalyse-test_sshd.pid
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:139 setting PermitTunnel no
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:140 setting VersionAddendum IAnalyse 0.0 (test)
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:143 setting AcceptEnv LANG LC_*
debug3: /opt/ianalyse-test/etc/ssh/sshd_config:146 setting Banner none
debug1: sshd version OpenSSH_7.8, LibreSSL 2.7.3
debug1: private host key #0: ssh-ed25519 SHA256:EcQ+iQylgHD/pFkLqZ89KIwTSHKCnZA3Iev29jNvdg4
debug1: rexec_argv[0]='/usr/sbin/sshd'
debug1: rexec_argv[1]='-E'
debug1: rexec_argv[2]='/opt/ianalyse-test/var/log/sshd.log'
debug1: rexec_argv[3]='-f'
debug1: rexec_argv[4]='/opt/ianalyse-test/etc/ssh/sshd_config'
debug1: rexec_argv[5]='-d'
debug1: rexec_argv[6]='-d'
debug1: rexec_argv[7]='-d'
debug1: rexec_argv[8]='-e'
debug2: fd 5 setting O_NONBLOCK
debug3: sock_set_v6only: set socket 5 IPV6_V6ONLY
debug1: Bind to port 8873 on ::.
Server listening on :: port 8873.
debug2: fd 6 setting O_NONBLOCK
debug1: Bind to port 8873 on 0.0.0.0.
Server listening on 0.0.0.0 port 8873.
[pjb@despina org.macports:0 sources]$
==> /opt/ianalyse-test/var/log/authorized-key-from-pg.log <==
Sat Dec  8 13:33:49 CET 2018  success   ian-testedf-metz001 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlKsXpuqxXMn2QwNekunwPfGiLzg8Yf7GnlAXBGUHuy ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICmhOh3rZ8GGnyYWWDiqvrtHrOJILlrceOblJGbjNggp metz001@testedf

==> /opt/ianalyse-test/var/log/sshd.log <==
debug1: fd 7 clearing O_NONBLOCK
debug1: Server will not fork when running in debugging mode.
debug3: send_rexec_state: entering fd = 10 config len 1944
debug3: ssh_msg_send: type 0
debug3: send_rexec_state: done
debug1: rexec start in 7 out 7 newsock 7 pipe -1 sock 10
debug3: recv_rexec_state: entering fd = 5
debug3: ssh_msg_recv entering
debug3: recv_rexec_state: done
debug2: parse_server_config: config rexec len 1944
debug3: rexec:14 setting Port 8873
debug3: rexec:23 setting HostKey /opt/ianalyse-test/etc/ssh/ssh_host_ed25519_key
debug3: rexec:28 setting HostbasedAuthentication no
debug3: rexec:32 setting IgnoreUserKnownHosts yes
debug3: rexec:35 setting IgnoreRhosts yes
debug3: rexec:45 setting SyslogFacility AUTH
debug3: rexec:46 setting LogLevel INFO
debug3: rexec:49 setting LoginGraceTime 30s
debug3: rexec:50 setting PermitRootLogin no
debug3: rexec:51 setting StrictModes yes
debug3: rexec:52 setting MaxAuthTries 3
debug3: rexec:53 setting MaxSessions 3
debug3: rexec:55 setting PubkeyAuthentication yes
debug3: rexec:56 setting PubkeyAcceptedKeyTypes ssh-ed25519,ssh-ed25519-cert-v01@openssh.com
debug3: rexec:65 setting AuthorizedKeysFile none
debug3: rexec:66 setting AuthorizedKeysCommand /opt/ianalyse-test/libexec/authorized-key-from-pg %u %t %k
debug3: rexec:67 setting AuthorizedKeysCommandUser ianalyse-test
debug3: rexec:69 setting RevokedKeys /opt/ianalyse-test/etc/ssh/revoked_keys
debug3: rexec:71 setting AuthorizedPrincipalsFile none
debug3: rexec:77 setting PasswordAuthentication no
debug3: rexec:78 setting PermitEmptyPasswords no
debug3: rexec:80 setting KbdInteractiveAuthentication no
debug3: rexec:104 setting UsePAM no
debug3: rexec:106 setting AllowAgentForwarding no
debug3: rexec:107 setting AllowStreamLocalForwarding no
debug3: rexec:108 setting AllowTcpForwarding no
debug3: rexec:110 setting AllowUsers ian-*
debug3: rexec:111 setting ChrootDirectory /Users/ianalyse-test/data/%u
debug3: rexec:113 setting AuthenticationMethods publickey
debug3: rexec:116 setting DisableForwarding yes
debug3: rexec:117 setting GatewayPorts no
debug3: rexec:118 setting X11Forwarding no
debug3: rexec:119 setting X11UseLocalhost no
debug3: rexec:120 setting XAuthLocation none
debug3: rexec:122 setting Compression yes
debug3: rexec:124 setting ClientAliveInterval 6
debug3: rexec:125 setting ClientAliveCountMax 5
debug3: rexec:127 setting PermitTTY no
debug3: rexec:128 setting PrintMotd no
debug3: rexec:129 setting PrintLastLog no
debug3: rexec:130 setting TCPKeepAlive yes
debug3: rexec:132 setting PermitUserEnvironment no
debug3: rexec:133 setting PermitUserRC no
debug3: rexec:136 setting UseDNS no
debug3: rexec:137 setting PidFile /var/run/ianalyse-test_sshd.pid
debug3: rexec:139 setting PermitTunnel no
debug3: rexec:140 setting VersionAddendum IAnalyse 0.0 (test)
debug3: rexec:143 setting AcceptEnv LANG LC_*
debug3: rexec:146 setting Banner none
debug1: sshd version OpenSSH_7.8, LibreSSL 2.7.3
debug1: private host key #0: ssh-ed25519 SHA256:EcQ+iQylgHD/pFkLqZ89KIwTSHKCnZA3Iev29jNvdg4
debug1: inetd sockets after dupping: 5, 5
debug3: BSM audit: connection from ::1 port 50817
debug3: BSM audit: iptype 16 machine ID 00000000 00000000 00000000 01000000
Connection from ::1 port 50817 on ::1 port 8873
debug1: Client protocol version 2.0; client software version OpenSSH_7.8
debug1: match: OpenSSH_7.8 pat OpenSSH* compat 0x04000000
debug1: Local version string SSH-2.0-OpenSSH_7.8 IAnalyse 0.0 (test)
debug2: fd 5 setting O_NONBLOCK
debug3: ssh_sandbox_init: preparing Darwin sandbox
debug2: Network child is on pid 78333
debug3: preauth child monitor started
debug3: ssh_sandbox_child: starting Darwin sandbox [preauth]
debug3: privsep user:group 75:75 [preauth]
debug1: permanently_set_uid: 75/75 [preauth]
debug1: list_hostkey_types: ssh-ed25519 [preauth]
debug3: send packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT sent [preauth]
debug3: receive packet: type 20 [preauth]
debug1: SSH2_MSG_KEXINIT received [preauth]
debug2: local server KEXINIT proposal [preauth]
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1 [preauth]
debug2: host key algorithms: ssh-ed25519 [preauth]
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: compression ctos: none,zlib@openssh.com [preauth]
debug2: compression stoc: none,zlib@openssh.com [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug2: peer client KEXINIT proposal [preauth]
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c [preauth]
debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa [preauth]
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
debug2: compression ctos: zlib@openssh.com,zlib,none [preauth]
debug2: compression stoc: zlib@openssh.com,zlib,none [preauth]
debug2: languages ctos:  [preauth]
debug2: languages stoc:  [preauth]
debug2: first_kex_follows 0  [preauth]
debug2: reserved 0  [preauth]
debug1: kex: algorithm: curve25519-sha256 [preauth]
debug1: kex: host key algorithm: ssh-ed25519 [preauth]
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: zlib@openssh.com [preauth]
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: zlib@openssh.com [preauth]
debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
debug3: receive packet: type 30 [preauth]
debug3: mm_sshkey_sign entering [preauth]
debug3: mm_request_send entering: type 6 [preauth]
debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
debug3: mm_request_receive_expect entering: type 7 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 6
debug3: mm_answer_sign
debug3: mm_answer_sign: hostkey proof signature 0x7f8b6d6005d0(83)
debug3: mm_request_send entering: type 7
debug2: monitor_read: 6 used once, disabling now
debug3: send packet: type 31 [preauth]
debug3: send packet: type 21 [preauth]
debug2: set_newkeys: mode 1 [preauth]
debug1: rekey after 134217728 blocks [preauth]
debug1: SSH2_MSG_NEWKEYS sent [preauth]
debug1: expecting SSH2_MSG_NEWKEYS [preauth]
debug3: send packet: type 7 [preauth]
debug3: receive packet: type 21 [preauth]
debug1: SSH2_MSG_NEWKEYS received [preauth]
debug2: set_newkeys: mode 0 [preauth]
debug1: rekey after 134217728 blocks [preauth]
debug1: KEX done [preauth]
debug3: receive packet: type 5 [preauth]
debug3: send packet: type 6 [preauth]
debug3: receive packet: type 50 [preauth]
debug1: userauth-request for user ian-testedf-metz001 service ssh-connection method none [preauth]
debug1: attempt 0 failures 0 [preauth]
debug3: mm_getpwnamallow entering [preauth]
debug3: mm_request_send entering: type 8 [preauth]
debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
debug3: mm_request_receive_expect entering: type 9 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 8
debug3: mm_answer_pwnamallow
debug2: parse_server_config: config reprocess config len 1944
debug3: auth2_setup_methods_lists: checking methods
debug1: authentication methods list 0: publickey
debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
debug3: mm_request_send entering: type 9
debug2: monitor_read: 8 used once, disabling now
debug2: input_userauth_request: setting up authctxt for ian-testedf-metz001 [preauth]
debug3: mm_inform_authserv entering [preauth]
debug3: mm_request_send entering: type 4 [preauth]
debug3: auth2_setup_methods_lists: checking methods [preauth]
debug1: authentication methods list 0: publickey [preauth]
debug2: Unrecognized authentication method name: none [preauth]
debug3: user_specific_delay: user specific delay 0.000ms [preauth]
debug3: ensure_minimum_time_since: elapsed 1.002ms, delaying 4.622ms (requested 5.624ms) [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 4
debug3: mm_answer_authserv: service=ssh-connection, style=
debug2: monitor_read: 4 used once, disabling now
debug3: userauth_finish: failure partial=0 next methods="publickey" [preauth]
debug3: send packet: type 51 [preauth]
debug3: receive packet: type 50 [preauth]
debug1: userauth-request for user ian-testedf-metz001 service ssh-connection method publickey [preauth]
debug1: attempt 1 failures 0 [preauth]
debug2: input_userauth_request: try method publickey [preauth]
debug1: userauth_pubkey: test pkalg ssh-ed25519 pkblob ED25519 SHA256:QLNrgZYCad+m3+8zzosM4yNHe0Ln7QxsQ/ZLEqk9ep8 [preauth]
debug3: mm_key_allowed entering [preauth]
debug3: mm_request_send entering: type 22 [preauth]
debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
debug3: mm_request_receive_expect entering: type 23 [preauth]
debug3: mm_request_receive entering [preauth]
debug3: mm_request_receive entering
debug3: monitor_read: checking request 22
debug3: mm_answer_keyallowed entering
debug3: mm_answer_keyallowed: key_from_blob: 0x7f8b6f800570
debug3: ssh_krl_from_blob: not a KRL
debug3: subprocess: AuthorizedKeysCommand command "/opt/ianalyse-test/libexec/authorized-key-from-pg ian-testedf-metz001 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlKsXpuqxXMn2QwNekunwPfGiLzg8Yf7GnlAXBGUHuy" running as ianalyse-test (flags 0x6)
debug1: temporarily_use_uid: 541/728 (e=0/0)
debug1: restore_uid: 0/0
debug3: subprocess: AuthorizedKeysCommand pid 78334
debug1: temporarily_use_uid: 541/728 (e=0/0)
debug1: restore_uid: 0/0
debug3: mm_answer_keyallowed: publickey authentication test: ED25519 key is not allowed
Failed publickey for ian-testedf-metz001 from ::1 port 50817 ssh2: ED25519 SHA256:QLNrgZYCad+m3+8zzosM4yNHe0Ln7QxsQ/ZLEqk9ep8
debug1: audit_event: unhandled event 6
debug3: mm_request_send entering: type 23
debug2: userauth_pubkey: authenticated 0 pkalg ssh-ed25519 [preauth]
debug3: user_specific_delay: user specific delay 0.000ms [preauth]
debug3: ensure_minimum_time_since: elapsed 57.188ms, delaying 32.795ms (requested 5.624ms) [preauth]
debug3: userauth_finish: failure partial=0 next methods="publickey" [preauth]
debug3: send packet: type 51 [preauth]
Connection closed by authenticating user ian-testedf-metz001 ::1 port 50817 [preauth]
debug1: do_cleanup [preauth]
debug1: monitor_read_log: child log fd closed
debug3: mm_request_receive entering
debug1: do_cleanup
debug1: Killing privsep child 78333
debug1: audit_event: unhandled event 12