From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 29021 invoked by alias); 7 Nov 2002 23:54:49 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 29011 invoked from network); 7 Nov 2002 23:54:48 -0000 Received: from unknown (HELO ex02.idirect.net) (208.226.76.48) by sources.redhat.com with SMTP; 7 Nov 2002 23:54:48 -0000 X-MimeOLE: Produced By Microsoft Exchange V6.0.4417.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: Is RSA authentication on SSH still broken? Date: Thu, 07 Nov 2002 15:54:00 -0000 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: From: "Harig, Mark A." To: X-SW-Source: 2002-11/txt/msg00377.txt.bz2 >=20 > First, the directory permission doesn't restrict the access for SYSTEM > due to the standard "Bypass traverse checking" setting on NT.=20 > So setting > the .ssh permissions to 0700 is perfectly fine. >=20 I must be missing a piece of information. Setting the permissions of ~/.ssh to 700 causes ssh to require me to enter a password, that is, the encryption-key processing is failing. Setting the permissions of ~/.ssh to 750 (if the group setting is SYSTEM) or to 755 (if the group setting is not SYSTEM) allows ssh to access the encryption-key files. > Second, I don't see the point in setting the permissions of > .ssh/authorized_keys to 0600 at all. The content of that=20 > file is a list > of the *public* part of the keys so it's their intent to be=20 > readable by > anybody. That was my understanding also. I assumed that my understanding was incorrect because ssh would report that my permissions for ~/.ssh/authorized_keys was too open. I'm unable to reproduce that at this time. This issue is closed as far as I am concerned, until I can reproduce the problem. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/