Andreas Tille wrote:
2010/2/8 Dr. David Kirkby <david.kir...@onetel.net>:
The ssh keys are important and has nothing to do with http, or even https.

Sure.  I'm so far familiar with Linux and different protokolls.

The basic idea is that the server process should run as one user, and the
data be stored as a second user. This adds some measure of security. The
user running the server must be able to ssh to the user where the files are
stored via password less ssh.

Following this idea I verified the password less ssh idea and stumbled about
the problem that this does not work if the home diretory of the target user is
writable by the group (at least when using the default Debian sshd
configuration).
After removing group write permissions also sage notebook works as expected.

I can sort of understand that, though I would have expected the restriction to only apply to the $HOME/.ssh directory, which should not even be readable by your group.

Note, this will not happen by default, even if you use the same user
account.

I'm just using the same user account.

But as I pointed out, a user can't ssh to his own account without taking steps to do so - at least on Solaris.

The steps on Solaris mean more than just not having group write permissions. One has to copy ones own public key to $HOME/.ssh/authorized_keys.

In this case, the virtual host must be able to log into sageu...@myhost via
passwordless ssh. If not, you get the problem you describe.

Thanks for the help which solved the problem.

Great. I've also got bit by this when I first set up a Sage server.

Anyway I would love to know whether there is a way to get a logfile which
stores the actuall command which are runned by Sage.

I can't answer that for you. I would suggest you post that as a separate question, as you are more likely to get an answer that way, though perhaps someone reading this will know.


--
To post to this group, send email to sage-support@googlegroups.com
To unsubscribe from this group, send email to 
sage-support+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/sage-support
URL: http://www.sagemath.org

Reply via email to