From owner-freebsd-questions@freebsd.org Sat Sep 14 07:39:18 2019 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 75D94EB261 for ; Sat, 14 Sep 2019 07:39:18 +0000 (UTC) (envelope-from aryeh.friedman@gmail.com) Received: from mail-io1-xd34.google.com (mail-io1-xd34.google.com [IPv6:2607:f8b0:4864:20::d34]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 46Vksd2h11z4dkx for ; Sat, 14 Sep 2019 07:39:17 +0000 (UTC) (envelope-from aryeh.friedman@gmail.com) Received: by mail-io1-xd34.google.com with SMTP id k5so42435362iol.5 for ; Sat, 14 Sep 2019 00:39:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=2TiUAfQS1nKqqiqThlsf1sYBT5ZasUNAwzKG4QqaYw0=; b=EG0o2PKIS++Am9yLxSWBa6KEI4zLCtR21JUbMaaPrDQGBwd9d53UOZY8w1Z3HTCAUW u+uNIMor3MrHJYhenCU9N8TMzyH5+N07JtuFSB2Ywr0cqcNKcNxaVgqX7tkfzd8eKMJU u/ZUK+nUvtDx+Uh3YUpuOXfFKZF2794IKAs1TLvtzVQdumj+UTo3dQBMY5W/RZCGhzZV H26Mn55UPmj8ojshHxxPFo8+n4HbF5WiIWYtxr6nULiiQUQeniZtFZtruKn9oMIvGyJi OK4rt7Ysl/6aKCt1Va/yeYxThMiy2oqc7z8KTAwC4pRitsP3Fn9ma8A5mCO2TyMmQixD WJFg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=2TiUAfQS1nKqqiqThlsf1sYBT5ZasUNAwzKG4QqaYw0=; b=aXUYIhrra1ocgnyQBgCxURmEOswRsr3m0ia5bJ22t28cJ/uuBan3n/8BUGem78tJzt YC27qajYEGNP4RNm2YDZZSN+7vvpkbFolyCZUN1ud9DRnPZOYk9PlzJiTBg9aiB0AEg4 KS4jcNI9hezJNh6InqbYFjMFBM/N8n5gAPN1cHvFDieOKd2/3lHhOnSocIg9DCCyHGo3 TZRl/L4CoDJXYNAxbfuS+smdWAczOe3+UqW9RMhbrFkwDTpTQBpu0V5JUBGRi4tOkw1z 6uwAqSPds6ZfGiBgem0OTj1eA6Tw5WqkKwpcxvGry1ZHYC1T8516gzp4W/w82/Le3haV lUIQ== X-Gm-Message-State: APjAAAWP6ac061AelerWcNU99JngVyYPBXttMUeBMdx0DhId7BEt0Jrh u6G3ojf3K5TddKux2QXxC4cCpzqxXNsyn7gwaJccMNDp X-Google-Smtp-Source: APXvYqxn14+oA+J7vvF6GVDzaRe3bR2VcuccaHgazu2ZUfXeZdipqKgVq2wgM0EvanoC7KY8BYA1beCrbISEDEfjpgQ= X-Received: by 2002:a6b:4117:: with SMTP id n23mr3170285ioa.119.1568446755973; Sat, 14 Sep 2019 00:39:15 -0700 (PDT) MIME-Version: 1.0 From: Aryeh Friedman Date: Sat, 14 Sep 2019 03:39:04 -0400 Message-ID: Subject: OT: My ssh authorized_keys doesn't work with nfs/nis To: FreeBSD Mailing List X-Rspamd-Queue-Id: 46Vksd2h11z4dkx X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=EG0o2PKI; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of aryehfriedman@gmail.com designates 2607:f8b0:4864:20::d34 as permitted sender) smtp.mailfrom=aryehfriedman@gmail.com X-Spamd-Result: default: False [-3.00 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE_FREEMAIL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(0.00)[ip: (-4.06), ipnet: 2607:f8b0::/32(-2.70), asn: 15169(-2.24), country: US(-0.05)]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[4.3.d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Sep 2019 07:39:18 -0000 My ~/.ssh/authorized_keys files works fine on a machine that is not in my NIS domain but when I copy my id_rsa.pub (which is what I did to create the non-NIS authorized_keys) to my NIS account and give it the same permissions as the working machine it insists on asking for a password. ssh faraway (non-NIS machine) does not ask for a password but ssh nearby (NIS machine) does Both have identical authorized keys and both (and their parent dirs) are set to 644. Both machines are FreeBSD 11 and the machine doing the ssh call is FreeBSD 12 -- Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org