X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Message-ID: <f60fe000809091520x30cedc33jdc03efabf46c186b@mail.gmail.com>
Date: Tue, 9 Sep 2008 18:20:26 -0400
From: "Mark J. Reed" <markjreed AT gmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: SSH publickey problem, password works (Win 2003, OpenSSH_5.1p1, Cygwin DLL1.5.25 )
In-Reply-To: <48C640CF.6060809@scn.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <48C640CF DOT 6060809 AT scn DOT org>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On Tue, Sep 9, 2008 at 5:24 AM, Just Me wrote:
> I've been fighting with SSH for a week now, I've read everything I can
> google, it's finally time to ask for help.
>
> I can ssh to any account using a password, no problem.  It bombs with a
> cannot seteuid error in the event log when I use a keypair.

Are you sure the seteuid error is the important one?

> The permissions of /home/sfinfo are 755
Acceptable.

> The permissions of /home/sfinfo/.ssh are 755
Bzzt.

> The permissions of /home/sfinfo/.ssh/authorized_keys are 644
Bzzt.

The symptoms you describe are not what I would expect, but I'm pretty
sure this will definitely not work unless the permissions on .ssh are
0700 and those on .ssh/authorized_keys are 0600.

> The authorized_keys file contains one DSA public key.
OK.

> The permissions on the private key, sfinfo_id_dsa are 600.

...the private key is, of course, on the system you're ssh'ing *from*
while the authorized_keys file is on the system you're ssh'ing *to*,
correct?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/