Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Re: PubkeyAuth disallowed for root only?

Subject: Re: PubkeyAuth disallowed for root only?
Date: Thu, 19 Apr 2007 14:42:25 -0600
Hello Dirk,

What is the value of PermitRootLogin in your sshd_config ? It can be
used to cause this sort of behavior.


Dirk H. Schulz wrote:
Hi folks,

we have a very weird phenomenon:

On two of our RedHat EL4 Update 4 servers root cannot login via ssh
using public keys. All other users can. root is asked for a password
instead.

sshd_config is RHEL4 default (that means pubkey auth allowed etc.),
and the rest is as well. The public keys are correctly appended to
/root/.ssh/authorized_keys. Rights on .ssh and its files are correct.
I have even tarred+gzipped and copied roots .ssh directory to another
server and tested there.

I have compared lots of things (sshd_config, pam config, even roots
.bash_profile) to a reference system where it works - everything I
have thought of is exactly the same.

PubkeyAuth has worked fine on the problem servers, but one of the
admins must have changed something, and of course no one remembers
anything. I am sure it is something small and silly I overlook.

Any hint and help is appreciated.


-- 
Peter Hunt
Opengear Inc - Secure Server Management - www.opengear.com 
Phone: 801 282 1387 ext 2229
Cell:  801 913 4073

<Prev in Thread] Current Thread [Next in Thread>