ssh by user amandabackup

[Matthew Saltzman]

On Sun, 2011-01-02 at 10:09 +0100, François Patte wrote: 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Le 02/01/2011 02:14, Matthew Saltzman a crit :
> > I'm trying to set up amanda using the amaddclient command.  That
> > requires that user amandabackup be able to log into the client machine
> > using ssh keys.
> > 
> > I've generated the keys on the server machine, copied the public key to
> > the client machine in /var/lib/amanda/.ssh/authorized_keys
> > (/var/lib/amanda is amandabackup's home directory).  I believe all file
> > protections are set correctly--they mirror the ones for a regular user.
> > But ssh fails to use the keys and prompts for a password.
> 
> Did you give some permission to selinux?

No, that turned out to be the problem.  (Didn't see the violation in
setroubleshoot because I was doing things remotely.)  I think it's a
bug: amandabackup is a normal user with home directory /var/lib/amanda/.
Logging in via ssh should "Just Work (tm)".

> 
> - --
> Franois Patte
> UFR de mathmatiques et informatique
> Universit Paris Descartes
> 45, rue des Saints Pres
> F-75270 Paris Cedex 06
> Tl. +33 (0)1 4286 2145
> http://www.math-info.univ-paris5.fr/~patte
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAk0gQNIACgkQdE6C2dhV2JWoXgCaA0qp1ObJDme7QXRTy0FxyaHJ
> AkUAnjQWDDCjiJ9LbkOBv7sfJwuJNO61
> =/0fS
> -----END PGP SIGNATURE-----
> 

-- 
                Matthew Saltzman

Clemson University Math Sciences
mjs AT clemson DOT edu
http://www.math.clemson.edu/~mjs