On Sat, Sep 02, 2000 at 01:25:09AM -0400, Adam McKenna wrote: > > > > my home directory is mode 710 and ssh works fine, on other systems my > > home is mode 755 and ssh still works fine (all with RSA auth and > > StrictModes yes) > > Actually, sshd only cares about ~/.ssh and ~/.ssh/authorized_keys and that > they're not group or world writable.
how much do you want to bet? [EMAIL PROTECTED] eb]$ chmod 770 . [EMAIL PROTECTED] eb]$ ls -ld ~ drwxrwx--- 56 eb users 4096 Sep 1 23:04 /home/eb [EMAIL PROTECTED] eb]$ [EMAIL PROTECTED] eb]$ ssh -v socrates SSH Version OpenSSH-1.2.3, protocol version 1.5. Compiled with SSL. debug: Reading configuration data /home/eb/.ssh/config [snip] debug: Connection established. debug: Remote protocol version 1.5, remote software version OpenSSH-1.2.3 [snip] debug: Trying RSA authentication with key '[EMAIL PROTECTED]' debug: Remote: RSA authentication refused for eb: bad ownership or modes for '/home/eb/'. debug: Server refused our key. debug: Trying RSA authentication with key '[EMAIL PROTECTED]' debug: Remote: RSA authentication refused for eb: bad ownership or modes for '/home/eb/'. debug: Server refused our key. Permission denied. debug: Calling cleanup 0x8056820(0x0) [EMAIL PROTECTED] eb]$ [EMAIL PROTECTED] eb]$ chmod 710 . [EMAIL PROTECTED] eb]$ ls -ld . drwx--x--- 56 eb users 4096 Sep 1 23:10 . [EMAIL PROTECTED] eb]$ [EMAIL PROTECTED] eb]$ ssh socrates Enter passphrase for RSA key '[EMAIL PROTECTED]': Last login: Fri Sep 1 19:09:40 2000 on tty9 [...] Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. You have mail. [EMAIL PROTECTED] eb]$ i also tried it with my home directory group set to my private group `eb' same deal. perhaps you have a different version of ssh? -- Ethan Benson http://www.alaska.net/~erbenson/
pgp4bkUmaIT9B.pgp
Description: PGP signature