On Tue, Aug 23, 2011 at 1:11 PM, Amos Shapira <[email protected]>wrote:

> On 23 August 2011 11:24, Glen Turner <[email protected]> wrote:
>
> > 1) I'd use ls -l to check the contents and permissions of
> > /home/sonia/.ssh/authorized_keys
> > you want
> > sonia:sonia -rw-------
> >
>
> This made me think about another option - do you use encrypted home
> directories?
> If so then maybe the authosized_keys file is only accessible when the user
> is logged in on the GUI.
>

I'm almost certain this is the case - authorized_users lives in your
homedir, your homedir only gets mounted (by default) when you're active -
logging in via ssh should trigger it to be mounted, but of course your
authorized_keys aren't available until after it's mounted, hence after you
log in.

Depending on how much effort you want to put in to work around this, you
could:
 - Turn off homedir encryption
 - Configure sshd to look for authorized_keys in another place
 - Use Kerberos auth, which doesn't need to read your homedir (nb: not a
simple solution)
 - Use signed SSH keys


 --Amos
> --
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
>
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to