Re: ssh authorized key failure
"David Highley wrote:"
Never mind, installed the Juice application another Android device and
everything works correctly. Uninstalled and reinstalled the Juice
application on the original device and it now works. That application
has not updated in a long while so no explaining what happened as far as
we know.
>
> Since the last selinux update on May 20,
> selinux-policy-targeted-3.13.1-225.16.fc25.noarch.
>
> My Android client Juice ssh mosh encryption key fails to authenticate.
> First found avc that was due to the use_nfs_home_dirs --> off getting
> turned off. Still fails with the following journal information, no avc
> logged. We have also tried turning up the log level on sshd and totally
> disable selinux. So given that we did a total disable of selinux and it
> still fails we are at a loss where to go next.
>
> Jun 09 19:06:25 spruce audit[2267]: CRYPTO_SESSION pid=2267 uid=0 auid=429496729
> 5 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start dire
> ction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=ecdh-sha2-nistp2
> 56 spid=2268 suid=74 rport=37507 laddr=10.2.2.2 lport=22
exe="/usr/sbin/sshd" h
> ostname=? addr=74.92.228.89 terminal=? res=success'
> Jun 09 19:06:25 spruce audit[2267]: USER_AUTH pid=2267 uid=0 auid=4294967295 ses
> =4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey
acct="dh
> ighley" exe="/usr/sbin/sshd" hostname=? addr=74.92.228.89 terminal=ssh
res=failed'
> Jun 09 19:06:25 spruce kernel: audit: type=1100 audit(1497060385.743:353): pid=2267
uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=pubkey acct="dhighley" exe="/usr/sbin/sshd" hostname=?
addr=74.92.228.89 terminal=ssh res=failed'
> Jun 09 19:06:25 spruce sshd[2267]: error: Received disconnect from 74.92.228.89 port
37507:3: com.jcraft.jsch.JSchException: Auth cancel [preauth]
> Jun 09 19:06:25 spruce audit[2267]: CRYPTO_KEY_USER pid=2267 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy
kind=server
fp=SHA256:d1:e7:9d:df:7e:c5:05:7c:22:2c:44:d4:21:c3:3b:02:ea:2c:32:9a:cd:b6:c3:93:d7:22:37:20:3d:75:1d:bb
direction=? spid=2268 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=?
res=success'
> Jun 09 19:06:25 spruce kernel: audit: type=2404 audit(1497060385.754:354): pid=2267
uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=destroy kind=server
fp=SHA256:d1:e7:9d:df:7e:c5:05:7c:22:2c:44:d4:21:c3:3b:02:ea:2c:32:9a:cd:b6:c3:93:d7:22:37:20:3d:75:1d:bb
direction=? spid=2268 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=?
res=success'
> Jun 09 19:06:25 spruce kernel: audit: type=2404 audit(1497060385.754:355): pid=2267
uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=destroy kind=session fp=? direction=both spid=2268 suid=74 rport=37507
laddr=10.2.2.2 lport=22 exe="/usr/sbin/sshd" hostname=? addr=74.92.228.89
terminal=? res=success'
> Jun 09 19:06:25 spruce kernel: audit: type=1109 audit(1497060385.754:356): pid=2267
uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd"
hostname=74.92.228.89 addr=74.92.228.89 terminal=ssh res=failed'
> _______________________________________________
> selinux mailing list -- selinux(a)lists.fedoraproject.org
> To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>