Home owner directory changed to vyos for the user after reboot.
set system login user foo authentication encrypted-password '$6$rounds=656000$J4tyWgIuk9b2x42.$w5Jwizza0dvVa3xOXUIsw60HK5RF3nnfxotE0/9ZRIpXECVtWt3ssI9o0UMoYLt8zKh3jFgro818y5V1Bm0Pr/'
Before and after reboot
vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 foo users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 14:30 .ssh vyos@r14:~$ reboot vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 vyos users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 vyos users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 vyos users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 vyos users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 vyos users 675 Jan 11 2021 .profile drwxr-xr-x 2 vyos users 4096 Aug 28 14:30 .ssh vyos@r14:~$
Most likely after TACACS+ implementation https://github.com/vyos/vyos-1x/commit/3ec727670de02cac06321719a0323650046d54a1
It also affects key-based authentication (for user vyos).
Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh
The thing is there expected vyos but we get foo owner for /home/vyos directory.
vyos@r14:~$ ls -la /home/vyos total 84 drwxr-xr-x 3 foo users 4096 Aug 28 14:30 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51993 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw------- 1 foo vyattacfg 55 Aug 28 13:10 .history_frr -rw------- 1 foo vyattacfg 20 Aug 28 14:30 .lesshst -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 11:11 .ssh -rw-r--r-- 1 foo users 0 Aug 28 11:12 .sudo_as_admin_successful vyos@r14:~$