-3

i want upgrade openssh, as i have error:

error: Unsafe AuthorizedKeysCommand: bad ownership or modes for file /usr/bin/get_ldap_ssh_key.sh

In sshd_config:

AuthorizedKeysCommand /usr/bin/get_ldap_ssh_key.sh
AuthorizedKeysCommandUser nobody

Bureport say Set all RESOLVED bugs to CLOSED with release of OpenSSH 7.1

I not found instructions how to upgrade openssh. How to do it?

closed as off-topic by Stephen Kitt, GAD3R, Jeff Schaller, Rui F Ribeiro, Archemar Oct 12 '16 at 9:18

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions describing a problem that can't be reproduced and seemingly went away on its own (or went away when a typo was fixed) are off-topic as they are unlikely to help future readers." – Stephen Kitt, GAD3R, Jeff Schaller, Rui F Ribeiro, Archemar
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Which Linux/Unix/*ix are you using? – EnzoR Oct 12 '16 at 8:26
3

That's not a bug that upgrading will fix, but an error in your setup. The sshd_config(5) manpage says

AuthorizedKeysCommand

Specifies a program to be used to look up the user's public keys. The program must be owned by root, not writable by group or others and specified by an absolute path.

You simply need to ensure that /usr/bin/get_ldap_ssh_key.sh satisfies these requirements:

sudo chown root:root /usr/bin/get_ldap_ssh_key.sh
sudo chmod 755 /usr/bin/get_ldap_ssh_key.sh
  • yep, file satisfies these requirements, but i have error – Nikita Oct 12 '16 at 8:23
  • i reboot host and it work o_O – Nikita Oct 12 '16 at 8:29

Not the answer you're looking for? Browse other questions tagged or ask your own question.