grsecurity forums

I use SSH to switch to another account on my server. I use a SSH key so I don't have to type a password every time. When I enable RBAC, SSH asks for a password again. I use Debian with a 2.6.24.5 kernel and the latest grsec patch.

I've used the learning mode to create a policy for ssh, but that didn't help. I'd like some advice, please.

Hiawatha wrote:I use SSH to switch to another account on my server. I use a SSH key so I don't have to type a password every time. When I enable RBAC, SSH asks for a password again. I use Debian with a 2.6.24.5 kernel and the latest grsec patch.

I've used the learning mode to create a policy for ssh, but that didn't help. I'd like some advice, please.

post your policy for sshd, probably it doesn't get access to the user's .ssh/authorized_keys file (an strace -f on sshd could confirm it).

That's it. I had tried giving sshd read access to the files in ~/.ssh, but I guess I must have done something wrong then (probably put it in the config for ssh instead of the config for sshd). Thanks and sorry for troubling you with my stupid mistake.