Reply
Thread Tools
blubbi's Avatar
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#1
Hi N950 owners,

I got mine two days ago but still struggle to get password less ssh authentication with dsa keys to work.

Well, it does work, but only for root.
If I copy the .ssh folder from /root/.ssh to /home/user/.ssh and try to login from remote as user, I am always asked for a password.

ssh user@n950ip --> Password request
ssh root@n950ip --> Immediate shell access

I attached a sdiff output for a login as root and user (ssh -vvv).
Maybe someone can find the flaw.

Thanks for any suggestions,
Bjoern
Attached Files
File Type: txt root_vs_user.txt (2.9 KB, 272 views)

Last edited by blubbi; 2011-07-23 at 17:35. Reason: SOLVED
 
casper27's Avatar
Posts: 844 | Thanked: 521 times | Joined on Jan 2009 @ UK southampton
#2
looks like you need to edit your sshd config file to disable password authentification and allow Users to log in.
 
blubbi's Avatar
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#3
Originally Posted by casper27 View Post
looks like you need to edit your sshd config file to disable password authentification
I am not aware that passworkd auth and key auth do interfere with each other. But I tried it anyway and the expected result for user popped up:

debug1: No more authentication methods to try.
Permission denied (publickey).

root still works fine.

Originally Posted by casper27 View Post
land allow Users to log in.
I already checked the sshd_config but couldn't find anything related.
What option are you referring to?

Cheers,
Bjoern
 
Posts: 166 | Thanked: 74 times | Joined on May 2010
#4
I always forget to check the easy stuff? Have you double checked the permissions on the .ssh folder and files? They should not be group or world readable.
 
blubbi's Avatar
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#5
Originally Posted by jschan View Post
I always forget to check the easy stuff? Have you double checked the permissions on the .ssh folder and files? They should not be group or world readable.
Of course ;-)
/home/user/.ssh is 700 and content is 600
But I tried all kinds of permissions and combinations.

If the permissions were wrong it wouldn't even work for root ;-)

I should have mentioned that this is not the first ssh server I have set up ;-) But I am desperately stuck on this one.

Thanks,
Bjoern
 
casper27's Avatar
Posts: 844 | Thanked: 521 times | Joined on Jan 2009 @ UK southampton
#6
Mmm definatley seems like a ownership issue try

chmod go-w .ssh /home/user/.ssh/

If that does not work edit /etc/passwd
Change

user:!:

To

user:*:

You may also have to give user a password, I've heard of problems before using the user account without a password. Make it a strong one.
 

The Following User Says Thank You to casper27 For This Useful Post:
blubbi's Avatar
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#7
Originally Posted by casper27 View Post
Mmm definatley seems like a ownership issue try

chmod go-w .ssh /home/user/.ssh/

If that does not work edit /etc/passwd
Change

user:!:

To

user:*:

You may also have to give user a password, I've heard of problems before using the user account without a password. Make it a strong one.
Thanks!

-user:!:
+user:*:

was the solution... everything else was fine just as it was

I could slap myself for not looking into passwd
 
casper27's Avatar
Posts: 844 | Thanked: 521 times | Joined on Jan 2009 @ UK southampton
#8
Glad you got it sorted, I know how enraging those "Simple" problems are when you've been staring at them for a while
 
blubbi's Avatar
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#9
Originally Posted by casper27 View Post
Glad you got it sorted, I know how enraging those "Simple" problems are when you've been staring at them for a while
You are absolutely right, I completely inspected the phones security options (some are really wired like being not able to execute a shell script as root) but nothing helped - obviously

After having sorted out this problem I also got Harmattan up and running in the Scratchbox under Gentoo

Now lets see if I get along with the PyQT -> PySide transition.

By the way, is there already a infrastructure/repositories/buildsystem for Harmattan?

Thanks again,
Bjoern
 
casper27's Avatar
Posts: 844 | Thanked: 521 times | Joined on Jan 2009 @ UK southampton
#10
Have a read through this thread over at meego
http://forum.meego.com/showthread.php?t=3671

Also you could have a look in
http://harmattan-dev.nokia.com/pool/...an-repository/

Its still a bit up in the air ATM.
 

The Following User Says Thank You to casper27 For This Useful Post:
Reply


 
Forum Jump


All times are GMT. The time now is 12:35.