Re: PubkeyAuth disallowed for root only?

Dirk H. Schulz wrote:
Hi folks,

we have a very weird phenomenon:

On two of our RedHat EL4 Update 4 servers root cannot login via ssh using public keys. All other users can. root is asked for a password instead.

sshd_config is RHEL4 default (that means pubkey auth allowed etc.), and the rest is as well. The public keys are correctly appended to /root/.ssh/authorized_keys. Rights on .ssh and its files are correct. I have even tarred+gzipped and copied roots .ssh directory to another server and tested there.

Maybe /root, / or /root/.ssh is group or world writable?

Failing that, if you either run sshd in debug mode (/path/to/sshd -ddd) or increase LogLevel in sshd_config then the server will provide more information about why the authentication was denied.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • csh core dumping 7.0-rc1
    ... After rebooting a FreeBSD 7.0-RC1 server I noticed I could not login ... as root either via ssh or su, I initially thought I forgot my password ... Luckily I had enabled root login on sshd and added my ssh ... Loaded symbols for /lib/libncurses.so.7 ...
    (freebsd-current)
  • RE: Dead SSH Connections from script
    ... >> dead SSH connections around, ... root on one machine to access all other machines thru SSH as root. ... we have told all the client machines that our server is an ...
    (RedHat)
  • Securing SSH: Does disabling password authentication work?
    ... Like most everyone who runs an SSH server on the standard port, ... password authentication when trying to authenticate to the server. ... Public keys work fine as well. ...
    (Debian-User)
  • Re: bash_history set to zero length
    ... I log in to the server over ssh to carry out various tasks for which I ... sometimes have to su to root. ... Maybe one of these disconnects cause the bash_history to become lost? ...
    (comp.os.linux.security)
  • Re: need remedial iptables info
    ... >> We recently had a server root level hacked. ... can I still "su -" from another account OK? ... > via ssh. ...
    (comp.os.linux.networking)