LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-30-2014, 11:32 AM   #1
buckb
LQ Newbie
 
Registered: Mar 2013
Posts: 6

Rep: Reputation: Disabled

I have 3 RHEL machines that were installed approximately the same time. Two of the three ssh RSA key login works as expected, but the third machine, RSA key login has never worked. It always requires a pw.

During my investigations, I discovered that ~/.ssh/known_hosts does not get updated, and is empty, despite having logged in from a number of machines.

I have compared /etc/ssh/sshd_config and the pam defs with the working machines, and cannot find any descrepencies.

/var/log/secure does get updated.

Can anyone enlighten me to why no updates to known_hosts. What am I missing?

Okay, have found another symptom, by turning on DEBUG, and the secure log shows ssh cannot open anything in ~/.ssh . So I will research the reasons for this.

Last edited by unSpawn; 05-30-2014 at 12:19 PM. Reason: //Retain 0-reply state
 
Old 05-30-2014, 12:51 PM   #2
smallpond
Senior Member
 
Registered: Feb 2011
Location: Massachusetts, USA
Distribution: Fedora
Posts: 4,140

Rep: Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263
Check permissions on the .ssh directory and known_hosts. Also look for errors in the logs.
 
1 members found this post helpful.
Old 05-30-2014, 01:31 PM   #3
GaWdLy
Member
 
Registered: Feb 2013
Location: San Jose, CA
Distribution: RHEL/CentOS/Fedora
Posts: 457

Rep: Reputation: Disabled
What user/perms are on ~/.ssh? What user are you logging in with?
 
1 members found this post helpful.
Old 05-30-2014, 06:43 PM   #4
lleb
Senior Member
 
Registered: Dec 2005
Location: Florida
Distribution: CentOS/Fedora/Pop!_OS
Posts: 2,983

Rep: Reputation: 551Reputation: 551Reputation: 551Reputation: 551Reputation: 551Reputation: 551
follow the links in my sig, they should help.
 
Old 06-09-2014, 05:33 AM   #5
buckb
LQ Newbie
 
Registered: Mar 2013
Posts: 6

Original Poster
Rep: Reputation: Disabled
It turns out that permissions for the entire system were wonky. I re-installed the OS, and now everything works. Thanks to all who replied.
 
Old 06-09-2014, 02:56 PM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Note on RHEL and other RPM-based systems system perms can be restored (see 'man rpm') so reinstalling the OS really should be a last resort option.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
rpm changes are not updating immediately and updating after some time. shri_22ram Linux - Newbie 1 05-13-2013 12:50 PM
Starting sshd: /etc/init.d/sshd: line 113: /usr/sbin/sshd: Permission denied sumanc Linux - Server 5 03-28-2008 04:59 AM
FC4-Starting sshd: Privilege separation user sshd does not exist FAILED kiranherekar Fedora 5 12-29-2005 02:22 PM
Enabling SSH in mandrake 9.2 - sshd vs. sshd-xinetd DogTags Linux - Newbie 7 11-25-2003 12:17 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration