[Beowulf] Passwordless ssh - strange problem

laytonjb at charter.net laytonjb at charter.net
Fri Sep 14 10:35:48 PDT 2007


I forgot to look in the secure logs (that tells how it's been since I had
to deal with a problem with ssh :)   ).

Anyway, what I'm seeing the logs is:

Authentication refused: bad ownership or modes for directory /home/panasas

This is the home directory of the account. /home/panasas is NFS exported
from the head node to the compute nodes. I wonder if there isn't a problem
with account?

BTW - I did set 600 on id_rsa (and id_dsa). I set 644 on authorized_keys
and id_rsa.pub id_dsa.pub. I'll also copy authorized_keys to authorized_keys2
I'm not sure if I'm using ssh2 or not (actually it's not even my cluster).

Thanks!

Jeff

---- Geoff <geoff at galitz.org> wrote: 
> 
> Then I would use ssh with debug:
> 
> ssh -v wherever
> 
> Also the /var/log/secure log on the receiving side may have relevant info.
> 
> Oh wait... stupid question on my part, did you verify that the  
> authorized_keys file on the node is in fact visible to you (can you "cat"  
> it)?  I am assuming that the user in question is not NFS exported to the  
> nodes.
> 
> -geoff
> 
> 
> 
> 
> Am 14.09.2007, 19:14 Uhr, schrieb <laytonjb at charter.net>:
> 
> > Checked that - it's 700.
> >
> >>
> >>
> >> Check the permissions on the .ssh directory.  They should be set to 700.
> >>
> >> -geoff
> >>
> >>
> >>
> >> Am 14.09.2007, 18:53 Uhr, schrieb <laytonjb at charter.net>:
> >>
> >> > Afternoon cluster party goers,
> >> >
> >> > I'm having trouble on a cluster with passwordless ssh. I followed all  
> >> the
> >> > steps (I think). On the head node, I generated the public and private
> >> > keys and then copied id_rsa.pub to authorized keys. Then I tried
> >> > logging into compute nodes and it asks for my password every time
> >> > (regardless of the number of times I log into the node). I've tried
> >> > changing
> >> > the permissions on authorized_keys a few times (600, 644) and that
> >> > doesn't seem to change the behavior. Any ideas?
> >> >
> >> > Thanks!
> >> >
> >> > Jeff
> >> >
> >> > _______________________________________________
> >> > Beowulf mailing list, Beowulf at beowulf.org
> >> > To change your subscription (digest mode or unsubscribe) visit
> >> > http://www.beowulf.org/mailman/listinfo/beowulf
> >>
> >>
> >>
> >> --
> >> Erstellt mit Operas revolutionärem E-Mail-Modul:  
> >> http://www.opera.com/mail/
> >
> >
> 
> 
> 
> -- 
> Erstellt mit Operas revolutionärem E-Mail-Modul: http://www.opera.com/mail/





More information about the Beowulf mailing list