ssh login using publickey authentication to an AIX system with NFS mounted home directory fails, prompts for password, and then succeeds when password is entered. Fails using protocol 1 and 2. Remote system is running OpenSSH 3.0.2p1. Failures occur when user's remte home directory and .ssh directory are set to 700. If permissions on both directories are set to 711 or the NFS mounted home directory is exported with root access, the login succeeds without prompting for a password. Problem existed in 2.9.9p2, but not in 2.9p2. Verbose output of login follows. % ssh -v -1 sp70 OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f debug1: Reading configuration data /home/msib/kdeen/.ssh/config debug1: Applying options for * debug1: Reading configuration data /etc/openssh/ssh_config debug1: Applying options for * debug1: Seeding random number generator debug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: restore_uid debug1: ssh_connect: getuid 10214 geteuid 0 anon 1 debug1: Connecting to sp70 [128.101.135.70] port 22. debug1: temporarily_use_uid: 10214/10200 (e=0) debug1: restore_uid debug1: temporarily_use_uid: 10214/10200 (e=0) debug1: restore_uid debug1: Connection established. debug1: read PEM private key done: type DSA debug1: read PEM private key done: type RSA debug1: identity file /home/msib/kdeen/.ssh/identity type 0 debug1: Remote protocol version 1.99, remote software version OpenSSH_3.0.2p1 debug1: match: OpenSSH_3.0.2p1 pat ^OpenSSH debug1: Local version string SSH-1.5-OpenSSH_2.9p2 debug1: Waiting for server public key. debug1: Received server public key (768 bits) and host key (1024 bits). debug1: Host 'sp70' is known and matches the RSA1 host key. debug1: Found key in /home/msib/kdeen/.ssh/known_hosts:19 debug1: Encryption type: 3des debug1: Sent encrypted session key. debug1: Installing crc compensation attack detector. debug1: Received encrypted confirmation. debug1: Trying RSA authentication via agent with 'kdeen@nimbus.msi.umn.edu' debug1: Remote: Authentication refused: realpath /homes/sp4/kdeen/.ssh/authorized_keys failed: The file access permissions do not allow the specified action. debug1: Server refused our key. debug1: RSA authentication using agent refused. debug1: Trying RSA authentication with key 'kdeen@nimbus.msi.umn.edu' debug1: Remote: Authentication refused: realpath /homes/sp4/kdeen/.ssh/authorized_keys failed: The file access permissions do not allow the specified action. debug1: Server refused our key. debug1: Doing password authentication. kdeen@sp70's password: debug1: Requesting pty.debug1: Requesting X11 forwarding with authentication spoofing. Warning: Remote host denied X11 forwarding. debug1: Requesting authentication agent forwarding. debug1: Requesting shell. debug1: Entering interactive session. %
Discussion on openssh-unix-dev@ points to a broken AIX realpath() which uses ruid (instead of euid) to perform checking. We need a configure test or (ugly) another platform-specific BORKEN_REALPATH
*** This bug has been marked as a duplicate of 220 ***
Mass change of RESOLVED bugs to CLOSED