Home / ubuntu / Questions / 420621
In Process
Jeanno
Asked: 2014-02-14 15:23:23 +0800 CST

Setting Passwordless ssh when a home directory is shared with NFS

  • 772

I have two nodes (master and slave) where the home directory of the master is shared via NFS with the slave node. I have created an ssh key and used 'ssh-copy-id' to add the public key to 'authorized_keys'.

The passwordless ssh works from the slave to the master, but not from the master to slave as I get "agent admitted failure to signing using key".

I think it may be an issue with file permissions but it is tricky since ~/.ssh folder is shared using NFS. Any ideas?

nfs

2 Answers

  1. If you have SELinux enabled, you may have to enable NFS mounted home directories via: 

    setsebool -P use_nfs_home_dirs=true

    I had this problem on RHEL, and found the solution in /var/log/messages:

    SELinux is preventing /usr/sbin/sshd from read access on the file authorized_keys.#012#012***** Plugin catchall_boolean (89.3 confidence) suggests
    ******************#012#012If you want to allow use to nfs home dirs#012Then you must tell SELinux about this by enabling the 'use_nfs_home_dirs' boolean.#012You can read 'None' man page for more details.#012Do#012setsebool -P use_nfs_home_dirs 1#012#012*****

    • 2

  2. Did you generate the key in master or slave? Try this on both master and slave:

    chmod go-w $HOME $HOME/.ssh
sudo chmod 600 $HOME/.ssh/authorized_keys
sudo chown 'username' $HOME/.ssh/authorized_keys

    "username" is the name of the user you need to enable ssh.

    Try this if the above method fails:

    ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]

    Enter this command from slave.

    • 1