SSH with selinux

RockHound · Posted: Thu May 15, 2003 5:53 am Post subject: SSH with selinux

Hi,

I don't know if this has to do anything with selinux but I have a problem connecting to my newly configured box via ssh. I can connect but after I enter the password it disconnects me immediatly ... I have setup 2 other boxes without any problems so you guys are my only help. I can connect via webmin. Root access has been disabled ... If i try to connect from the box locally via ssh it works (sh user@localhost") ...

Hope you can help...

Greetz,

Martin

Braempje · l33t Joined: 31 Jan 2003 Posts: 748

Check your sshd.conf file to verify that sshd doesn't have a listeninterface that's incorrect. If that doesn't work out post it.

RockHound · Posted: Thu May 15, 2003 6:49 am Post subject:

I don't think that has anything to do with the listeninterface because I can connect... The problem is that it kills the connection immediatly after entering the password ...

RockHound · Posted: Thu May 15, 2003 10:16 am Post subject:

Any suggestions yet?

mr-simon · Posted: Thu May 15, 2003 11:38 am Post subject:

I totally failed to get to grips with selinux. When I *finally* managed to switch it into enforcing mode, it kicked me out of bash and wouldn't let me log in again.

However... Do you have selinux running in enforcing mode? If you do, have you tried switching that off to see if it makes a difference? - It sounds like it doesn't want you running your default shell for some reason.
_________________
"Pokey, are you drunk on love?"
"Yes. Also whiskey. But mostly love... and whiskey."

caefer · Posted: Thu Jul 03, 2003 10:25 am Post subject:

I have the same problem.
I don't think I'm in enforced mode (how can I be sure?).
my nics ping the lan and vice versa.

have you got this solved yet?

paranode · l33t Joined: 06 Mar 2003 Posts: 679 Location: Texas

Did you have selinux in your USE flags when you compiled OpenSSH? It's one of the options.
_________________
Meh.

caefer · Posted: Fri Jul 04, 2003 11:25 am Post subject:

GO IT!

the problem was, that I wasn't logged in really.
my root wasn't root at all.
I had to re-emerge pam-login and then everything worked fine.
thanks to the #gentoo-hardened channel!

regards
/christian