Skip to content
This repository was archived by the owner on Jan 22, 2025. It is now read-only.

Commit c704319

Browse files
committed
Add docs on correct permissions for the files
1 parent f3d2574 commit c704319

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

docs/troubleshooting.md

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,9 +51,17 @@ TrustedUserCAKeys /etc/ssh/ca.pub
5151
AuthorizedPrincipalsFile /etc/ssh/auth_principals/%u
5252
```
5353

54+
Also, ensure that these permissions are correctly set:
55+
56+
```
57+
chmod 0645 /etc/ssh/auth_principals/
58+
chmod 0644 /etc/ssh/auth_principals/*
59+
chmod 0644 /etc/ssh/ca.pub
60+
```
61+
5462
If that all looks good, review the getting started directions and ensure that you have followed the steps correctly.
5563
Additionally, it is recommended to compare your sshd_config file with the stock one for your OS to look for any
56-
non-standard config options. For example, setting `UsePAM no` will prevent the SSH CA from working.
64+
non-standard config options. For example, setting `UsePAM no` may prevent the SSH CA from working.
5765
([sshca.md](./sshca.md) also has some additional information on how SSH CAs work that may
5866
be helpful). If you would like to follow an example, see the code in the `tests/` directory which contains integration
5967
tests (focus on Dockerfile-sshd for an example SSH server setup). If none of that works, the best strategy is to run

0 commit comments

Comments
 (0)