in reply to FreeRadius Config Propagation

when i use scp or ssh in an interactive session, I am authenticated without problem.

Are you sure the ssh keys are ok for the httpd daemon user? - it is the user that have it's home in /var/www/

Replies are listed 'Best First'.
Re^2: FreeRadius Config Propagation
by amt (Monk) on Oct 01, 2004 at 19:41 UTC
    I suspect not, because I am getting that error. But if I was to create that directory in /var/www/ wouldn't the directory .ssh be visable, or does the webroot begin at /var/www/html/?

    amt.

    perlcheat
      amt - neither - I believe you're dealing with the web server userID's $HOME on the remote host (e.g. the web server document root doesn't matter).. and the .ssh dir should be a subdir of that (unless you specify otherwise). And of course that all has to be set up in advance including the authorized_keys portions..
        So you think that I should take a look at the reciever's apache home directory for the authorized_keys?

        amt.

        perlcheat

      .ssh is not visible by default, but you should not do that anyway - it may be exploitable. You may have better to set up a user just to handle the ssh communication.

        Yes, but this propagation function is triggered by a perl script executed by apache as a CGI, so a plain user might not do the trick. I am also writing to /root/etc.

        amt.

        perlcheat