François Patte wrote: > Le 20/01/2010 09:19, Ed Greshko a écrit : > > François Patte wrote: > >> Le 19/01/2010 13:13, Colin Paul Adams a écrit : > >>> Hello, > >>> today I upgraded (actually a fresh install, but I kept my old /home > >>> partition) to Fedora 12. > >>> Now I can't ssh to the machine (I use DSA public key authentication > >>> only). I can't figure out why. > >> Disable Selinux > >> > > Don't you think it would be a good idea to first check the logs to > > actually see if there is any selinux messages that could relate to the > > problem? > > In this case, I think that Selinux is the culprit: I had this problem > too: You can ssh "classically" (ssh john.Doe@xxxxxxxxxxx, then give > password), but not using DSA public key authentication. > > I don't understand the Selinux policy in this case because DSA public > key authentication seems to be more secure than the other way. > > > The OP remains free to re-enable Selinux after finding the good Selinux > rules to solve the problem. > I feel jumping to a conclusion without any evidence is poor troubleshooting. FWIW, I have a RHELv4 and once I transfered my pub key to my F12 system and included it in my authorized_keys files I can ssh to my F12 system without a need for a password. selinux is enabled and enforcing on my F12 system.
Attachment:
signature.asc
Description: OpenPGP digital signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines