Hey All,

This is on Cent OS 7

I have an NFS mount that is the home folder for an unprevilidged user that I would like to share out via NFS to other nodes. This folder has .ssh directory with an authorized_keys file that has the passless keys to host01. So if I share it out to host02, I expect that host01 will login without a password. It doesn't work. However when I unmount the NFS share from host02 and allow local storage of the authorized_keys file as is typical, the ssh from host01 to host02 works without a pass, just as expected.

When I mount NFS back on host02, the ssh from host01 asks for a password again. I thought it is something in the keys in the shared otu authorized_keys file, but the keys are identical.

Then I shutdown ssh on both nodes and ran each one in debug mode. The funny thing is even with the shared out NFS folder mounted on host02, I can login to host02 from host01 without a pass. So running SSH in debug mode allows for such a shared out NFS mount. Now why doesn't it work out of the box when restarting sshd using systemctl restart sshd?

Cheers,

Using audit2why on /var/log/audit/audit.log told me it was an selinux policy issue and gave the solution as well.