start > RockyLinux > 8 > SSH Key Exchange Login Fails
SSH Key Exchange Login Fails
(2022-01-18)
There's also the confirmation that if you do a setenforce 0 it suddenly works.Problem is that the home directory probably wasn't created in a way that put the SELinux contexts on it. In our case, it is a non-standard home root (ie: /home2/user).
Problem
$ ssh there Warning: Permanently added 'there,10.240.0.10' (ECDSA) to the list of known hosts. user@there: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
Details
SELinux is preventing access to ~user/.ssh/authorized_keys. Confirm in /var/log/audit, there will be something liketype=AVC msg=audit(1642518164.563:299): avc: denied { read } for pid=5129 comm="sshd" name="authorized_keys" dev="sda2" ino=184549634 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:default_t:s0 tclass=file permissive=0Solution
To fix:# restorecon -R -v /home2 # chcon -R unconfined_u:object_r:user_home_t:s0 /home2
no comments |
post comment
Virtual Dave Megaplex:
Home Page- This wiki's start page
- Send Feedback To Dave
Logged in Users: (0)
Recently Changed
Check Internet Service Database Match- Device-Local Certificate Expired
- CLI Policy Lookup
- DH Selection For IPsec VPNs
- Scan For Newly Added Disk
- nmap
- Seconds Since Epoch to Local Time
- Link Monitor
- DH group to OAKLEY_GROUP table
- Fire Eater
- start
- FortiClient Error Codes
- dhparams Generation
- SSL Certificate Bundles
- ufw
- Grow A LVM Partition
- Creating Users
- whoami
- list databases
- 2023
- 2022
- 2019
- 2018
- 2017
- 2011
- 2010
- 2008
- 2001
- 2000
- 1999
Editing: snipsnap-help, Image Macro(Et auditum est, et idcirco ego nunc simulare)
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.