Bug 732203

Description of problem:

After setting up monkeysphere to create /var/lib/monkeysphere/authorized_keys/* and configuring sshd to use these files, logging in with one of those keys fails. This is because sshd is rather fascist regarding who may write the authorized_keys files. In Debian (where monkeysphere is known to work) both /var/lib/monkeysphere and /var/lib/monkeysphere/authorized_keys are owned by root:root (mode 0755), whereas in Fedora they are owned by monkeysphere:monkeysphere (mode 0755).


Version-Release number of selected component (if applicable):
0.35-3.fc14.noarch


How reproducible:
Always


Steps to Reproduce:
1. Set up monkeysphere (watch out for #732191).
2. Add "AuthorizedKeysFile2 /var/lib/monkeysphere/authorized_keys/%u" [sic] and "LogLevel DEBUG" to /etc/ssh/sshd_config.
3. Restart sshd.
4. Try to log in via ssh using one of the monkeysphere managed keys for the user.
5. Check /var/log/secure for error messages.
  
Actual results:
Logging in via ssh fails. Error messages in /var/log/secure:

Aug 20 16:51:09 bs-f14-i386 sshd[26329]: Authentication refused: bad ownership or modes for directory /var/lib/monkeysphere/authorized_keys
Aug 20 16:51:09 bs-f14-i386 sshd[26329]: Authentication refused: bad ownership or modes for directory /var/lib/monkeysphere/authorized_keys



Expected results:
Logging in via ssh works. No error message in /var/log/secure.


Additional info:
After fixing ownership of /var/lib/monkeysphere/authorized_keys _and_ /var/lib/monkeysphere logging in via ssh works fine.