SSH asks for password with RBAC

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

SSH asks for password with RBAC

Postby Hiawatha » Tue Sep 02, 2008 3:31 am

I use SSH to switch to another account on my server. I use a SSH key so I don't have to type a password every time. When I enable RBAC, SSH asks for a password again. I use Debian with a 2.6.24.5 kernel and the latest grsec patch.

I've used the learning mode to create a policy for ssh, but that didn't help. I'd like some advice, please.
Hiawatha
 
Posts: 2
Joined: Tue Sep 02, 2008 3:25 am

Re: SSH asks for password with RBAC

Postby PaX Team » Tue Sep 02, 2008 5:33 am

Hiawatha wrote:I use SSH to switch to another account on my server. I use a SSH key so I don't have to type a password every time. When I enable RBAC, SSH asks for a password again. I use Debian with a 2.6.24.5 kernel and the latest grsec patch.

I've used the learning mode to create a policy for ssh, but that didn't help. I'd like some advice, please.
post your policy for sshd, probably it doesn't get access to the user's .ssh/authorized_keys file (an strace -f on sshd could confirm it).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: SSH asks for password with RBAC

Postby Hiawatha » Tue Sep 02, 2008 12:09 pm

That's it. I had tried giving sshd read access to the files in ~/.ssh, but I guess I must have done something wrong then (probably put it in the config for ssh instead of the config for sshd). Thanks and sorry for troubling you with my stupid mistake.
Hiawatha
 
Posts: 2
Joined: Tue Sep 02, 2008 3:25 am


Return to grsecurity support

cron