[scponly] Could not open keyfile '/home/testuser/.ssh/authorized_keys': Permission denied

Kaleb Pederson kaleb.pederson at gmail.com
Wed Oct 24 14:34:11 EDT 2012


This is probably strictly an open ssh issue. At first glance
everything looks reasonable. I keep thinking that OpenSSH wants the
HOME directory of the user owned by that user (which I don't believe
works with chroots)... either that or OpenSSH requires that the parent
folder to the .ssh folder by owned by the user.

I can take a look on my system later tonight. In the mean time, IIRC,
if you set the right debugging/verbosity flags in OpenSSH, it'll tell
you what's happening.

HTH

--Kaleb

On Wed, Oct 24, 2012 at 11:14 AM, oliver rau
<oliver.rau at systemlogistik.dpd.com> wrote:
> Hi Kaleb,
>
> thank you, here comes the output:
>
> ls -ld /
> drwxr-xr-x 21 root root 4096 27. Sep 12:14 /
>
> ls -ld /home
> drwxrwx--T 15 nobody ftpgroup 4096 24. Okt 15:47 /home
>
> ls -ld /home/testuser
> drwxr-xr-x 9 root root 4096 24. Okt 15:50 /home/testuser
>
> ls -ld /home/testuser/.ssh
> drwx------ 2 testuser testuser 4096 24. Okt 15:55
>
> ls -l /home/testuser/.ssh/authorized_keys
> -rw------- 1 testuser testuser 1281 24. Okt 15:58
> /home/testuser/.ssh/authorized_keys
>
> Oliver
>
> On 24.10.2012 17:13, Kaleb Pederson wrote:
>  > I'd guess it's the permissions on the home directory. See Section 3.14
>  > in OpenSSH's FAQ:
>  >
>  > http://www.openssh.org/faq.html
>  >
>  > If that doesn't help, the output from the following would be helpful:
>  >
>  > ls -ld / ; ls -ld /home ; ls -ld /home/testuser ; ls -ld
>  > /home/testuser/.ssh ; ls -l /home/testuser/.ssh/authorized_keys
>  >
>  > Thanks.
>  >
>  > --Kaleb
>
>
> Sitz der Gesellschaft: Neufahrn bei Freising
> Registergericht Muenchen HRA 77871
>
> Persoenlich haftende Gesellschafterin:
> DPD Systemlogistik Management GmbH
> Registergericht Bad Hersfeld HRB 799
> Geschaeftsfuehrer: Andreas Wild
>
>
> E-Mails schonen die Umwelt. Umso mehr, wenn sie nicht ausgedruckt werden.
> Bitte drucken Sie diese E-Mail nur, wenn es erforderlich ist.
>
> Think about the environment! Do not print this mail unless necessary.
>
> _______________________________________________
> scponly mailing list
> scponly at lists.ccs.neu.edu
> https://lists.ccs.neu.edu/bin/listinfo/scponly



More information about the scponly mailing list