Re: [vserver] Bug#633526: vserver kernel breaks ssh public_key authentication on NFS

From: Ben Hutchings <ben_at_decadent.org.uk>
Date: Tue 12 Jul 2011 - 16:55:42 BST
Message-ID: <20110712155541.GS29924@decadent.org.uk>

On Tue, Jul 12, 2011 at 09:45:05AM -0500, Michael S. Zick wrote:
> On Tue July 12 2011, Art -kwaak- van Breemen wrote:
> > On Tue, Jul 12, 2011 at 10:59:17AM +0100, Ben Green wrote:
> > > Quoting Ben Hutchings <ben@decadent.org.uk>:
> > >
> > > >
> > > ># ls -al /home/hdunkel/.ssh/authorized_keys
> > > >-rw------- 1 4294967294 4294967294 1406 Jun 15 14:34 authorized_keys
> > >
> > > That's what a file system which been mounted with the "tag" option
> > > under a vserver kernel looks like when exported via NFS to a machine
> > > with a standard kernel I believe.
> >
> > Actually I think it's some kind of nobody/nogroup id for 32
> > bits...
> > Or maybe the apple variant for nfs of public shared id.
> > It's all bits 1 except for bit 0.
> >
>
> If so, then sshd will not like the authorized_keys file.
> sshd has strict requirements for ownership and permissions on
> that file (see: man sshd).
 
Look back up the thread. That is not the real ownership. For
some reason, when sshd looks at the file (at which point it may
still be running at root - but I'm not sure) the ownership
information is changed in-memory.

Ben.

-- 
Ben Hutchings
We get into the habit of living before acquiring the habit of thinking.
                                                              - Albert Camus
Received on Tue Jul 12 16:55:52 2011
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 12 Jul 2011 - 16:55:52 BST by hypermail 2.1.8