Subject: Re: [vserver] ssh to vserver fails
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Mon, 31 Aug 2009 18:55:59 +0200

On Mon, Aug 31, 2009 at 10:12:19AM +0530, Chaitra Gorantla wrote:
> HI all,
> 
> I have created vserver container(SELINUX=NO) and assigned private IP to 
> each container and also updated the NAt rules for ssh.
> Changed the listen address on the host machine in the sshd_config (ssh on 
> host is an port 22)
> Changed the listen address and also port number on the vserver container 
> in the sshd_config (ssh on container is at port 6900)
> 
> I installed openssh-5.2p1 on the vserver without selinux.
> 
> But when i try to do ssh as root user  from another PC, i get the 
> following error:
> 
> Aug 31 15:41:56 vps1 sshd[28075]: Accepted password for root from 
> 172.28.9.149 port 38009 ssh2
> Aug 31 15:41:56 vps1 sshd[28075]: fatal: ssh_selinux_getctxbyname: 
> ssh_selinux_getctxbyname: security_getenforce() failed

seems your sshd 'requires' selinux in the current config

> I am not able to create users on the vserver container. i get the 
> following error:
> #adduser newuser
>  Adding user newuser...
>  Adding new group newuser (1000).
>  groupadd: PAM authentication failed

probably a similar issue

>  adduser: `/usr/sbin/groupadd -g 1000 newuser' returned error code 1. 
> Aborting.
>  Cleaning up.
>  Removing group `newuser'.
>  groupdel: PAM authentication failed
> 
> Please suggest.

fix your client installation or enable and configure
se-linux to handle host and guests properly

best,
Herbert

> ______________________________________________________________________