Opened 13 years ago
Last modified 8 years ago
#506 new defect
IZ2550: qrsh does not work with ssh in RHEL5
Reported by: | olle | Owned by: | |
---|---|---|---|
Priority: | normal | Milestone: | |
Component: | sge | Version: | 6.1u4 |
Severity: | minor | Keywords: | Linux clients |
Cc: |
Description
[Imported from gridengine issuezilla http://gridengine.sunsource.net/issues/show_bug.cgi?id=2550]
Issue #: 2550 Platform: All Reporter: olle (olle) Component: gridengine OS: Linux Subcomponent: clients Version: 6.1u4 CC: None defined Status: NEW Priority: P3 Resolution: Issue type: DEFECT Target milestone: --- Assigned to: roland (roland) QA Contact: roland URL: * Summary: qrsh does not work with ssh in RHEL5 Status whiteboard: Attachments: Issue 2550 blocks: Votes for issue 2550: Opened: Thu Apr 10 01:47:00 -0700 2008 ------------------------ Default in RHEL5 is selinux in enforced mode, but this prevents sshd from working when used by SGE. $ rpm -q openssh selinux-policy openssh-4.3p2-24.el5 selinux-policy-2.4.6-106.el5_1.3 $ sudo /usr/sbin/setenforce 0 $ qrsh /bin/true $ sudo /usr/sbin/setenforce 1 $ qrsh /bin/true Read from remote host testnet-s8.testnet.jeppesensystems.com: Connection reset by peererror: error reading returncode of remote command /var/log/audit/audit.log: type=USER_LOGIN msg=audit(1207815802.343:1051): user pid=2176 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='acct="olle": exe="/usr/sbin/sshd" (hostname=?, addr=10.10.2.18, terminal=sshd res=failed)' type=USER_ACCT msg=audit(1207815802.361:1052): user pid=2176 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct="olle" : exe="/usr/sbin/sshd" (hostname=testnet-s8.testnet.jeppesensystems.com, addr=10.10.2.18, terminal=ssh res=success)' type=USER_ROLE_CHANGE msg=audit(1207815802.454:1053): user pid=2176 uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='sshd: default-context=user_u:system_r:unconfined_t:s0 selected-context=user_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" (hostname=?, addr=?, terminal=? res=failed)'
Note: See
TracTickets for help on using
tickets.
See #1377