[Bug 1017738] New: sshd pubkey auth fails due to wrong path for authorized_keys in sshd_config
http://bugzilla.opensuse.org/show_bug.cgi?id=1017738 Bug ID: 1017738 Summary: sshd pubkey auth fails due to wrong path for authorized_keys in sshd_config Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening@forge.provo.novell.com Reporter: audiomobster@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- In /etc/sshd_config "AuthorizeKeysFile" must be set like this: AuthorizedKeysFile /%h/.ssh/authorized_keys -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1017738 http://bugzilla.opensuse.org/show_bug.cgi?id=1017738#c1 Neil Rickert <nwr10cst-oslnx@yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nwr10cst-oslnx@yahoo.com --- Comment #1 from Neil Rickert <nwr10cst-oslnx@yahoo.com> --- I am puzzled, particularly by that "must". I have the following line in sshd_config AuthorizedKeysFile .ssh/authorized_keys As far as I know, that's as installed with Tumbleweed. And it has been working without any hitches. I'll add that I do my Tumbleweed updates via an ssh to root@localhost using public key authentication. So this is tested often on my system. Is this bug report wanting to fix something that isn't broken? -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1017738 http://bugzilla.opensuse.org/show_bug.cgi?id=1017738#c2 Petr Cerny <pcerny@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #2 from Petr Cerny <pcerny@suse.com> --- The current setting is working just fine - cf. sshd_config(5) man page:
AuthorizedKeysFile ... After expansion, AuthorizedKeysFile is taken to be an absolute path or one relative to the user's home directory. ...
That said, `/%h/.ssh/authorized_keys` is an equivalent to the current setting (coming from upstream, by the way), but unnecessarily complicated. Closing as INVALID. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1017738 http://bugzilla.opensuse.org/show_bug.cgi?id=1017738#c3 --- Comment #3 from Ulrich-Lorenz Schlüter <audiomobster@gmail.com> --- Hmm, I'm using OpenSSH_7.2p2 which I'm sure (as I can be) wasn't working without that %h setting. I found the solution on: https://de.opensuse.org/SDB:OpenSSH_konfigurieren directly under Troubleshooting Sorry for any inconvenience. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com