Skip to content
This repository was archived by the owner on Jan 22, 2025. It is now read-only.

Commit f3d2574

Browse files
committed
Add additional information to the troubleshooting section per github issue
Someone ran into an issue where their sshd_config has the `UsePAM yes` line commented out which caused the sshd to reject CA connections. Adds a general note about sshd_config contents and a specific warning about UsePAM.
1 parent 8c974f5 commit f3d2574

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

docs/troubleshooting.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,9 @@ TrustedUserCAKeys /etc/ssh/ca.pub
5151
AuthorizedPrincipalsFile /etc/ssh/auth_principals/%u
5252
```
5353

54-
If that all looks good, review the getting started directions and ensure that you have followed the steps correctly
54+
If that all looks good, review the getting started directions and ensure that you have followed the steps correctly.
55+
Additionally, it is recommended to compare your sshd_config file with the stock one for your OS to look for any
56+
non-standard config options. For example, setting `UsePAM no` will prevent the SSH CA from working.
5557
([sshca.md](./sshca.md) also has some additional information on how SSH CAs work that may
5658
be helpful). If you would like to follow an example, see the code in the `tests/` directory which contains integration
5759
tests (focus on Dockerfile-sshd for an example SSH server setup). If none of that works, the best strategy is to run

0 commit comments

Comments
 (0)