Re: [vserver] ssh to vserver fails

From: Herbert Poetzl <herbert_at_13thfloor.at>
Date: Mon 31 Aug 2009 - 17:55:59 BST
Message-ID: <20090831165559.GA1739@MAIL.13thfloor.at>

On Mon, Aug 31, 2009 at 10:12:19AM +0530, Chaitra Gorantla wrote:
> HI all,
>
> I have created vserver container(SELINUX=NO) and assigned private IP to
> each container and also updated the NAt rules for ssh.
> Changed the listen address on the host machine in the sshd_config (ssh on
> host is an port 22)
> Changed the listen address and also port number on the vserver container
> in the sshd_config (ssh on container is at port 6900)
>
> I installed openssh-5.2p1 on the vserver without selinux.
>
> But when i try to do ssh as root user from another PC, i get the
> following error:
>
> Aug 31 15:41:56 vps1 sshd[28075]: Accepted password for root from
> 172.28.9.149 port 38009 ssh2
> Aug 31 15:41:56 vps1 sshd[28075]: fatal: ssh_selinux_getctxbyname:
> ssh_selinux_getctxbyname: security_getenforce() failed

seems your sshd 'requires' selinux in the current config

> I am not able to create users on the vserver container. i get the
> following error:
> #adduser newuser
> Adding user newuser...
> Adding new group newuser (1000).
> groupadd: PAM authentication failed

probably a similar issue

> adduser: `/usr/sbin/groupadd -g 1000 newuser' returned error code 1.
> Aborting.
> Cleaning up.
> Removing group `newuser'.
> groupdel: PAM authentication failed
>
> Please suggest.

fix your client installation or enable and configure
se-linux to handle host and guests properly

best,
Herbert

> ______________________________________________________________________
Received on Mon Aug 31 17:56:17 2009

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 31 Aug 2009 - 17:56:19 BST by hypermail 2.1.8