Change Details

Home owner directory changed to `vyos` for the user after reboot. ``` set system login user foo authentication encrypted-password '$6$rounds=656000$J4tyWgIuk9b2x42.$w5Jwizza0dvVa3xOXUIsw60HK5RF3nnfxotE0/9ZRIpXECVtWt3ssI9o0UMoYLt8zKh3jFgro818y5V1Bm0Pr/' ``` Before and after reboot ``` vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 foo users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 14:30 .ssh vyos@r14:~$ reboot vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 vyos users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 vyos users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 vyos users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 vyos users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 vyos users 675 Jan 11 2021 .profile drwxr-xr-x 2 vyos users 4096 Aug 28 14:30 .ssh vyos@r14:~$ ``` Most likely after TACACS+ implementation https://github.com/vyos/vyos-1x/commit/3ec727670de02cac06321719a0323650046d54a1 It also affects key-based authentication (for user vyos). ``` Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh ```

Home owner directory changed to `vyos` for the user after reboot. ``` set system login user foo authentication encrypted-password '$6$rounds=656000$J4tyWgIuk9b2x42.$w5Jwizza0dvVa3xOXUIsw60HK5RF3nnfxotE0/9ZRIpXECVtWt3ssI9o0UMoYLt8zKh3jFgro818y5V1Bm0Pr/' ``` Before and after reboot ``` vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 foo users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 14:30 .ssh vyos@r14:~$ reboot vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 vyos users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 vyos users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 vyos users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 vyos users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 vyos users 675 Jan 11 2021 .profile drwxr-xr-x 2 vyos users 4096 Aug 28 14:30 .ssh vyos@r14:~$ ``` Most likely after TACACS+ implementation https://github.com/vyos/vyos-1x/commit/3ec727670de02cac06321719a0323650046d54a1 It also affects key-based authentication (for user vyos). ``` Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh ``` The thing is there expected `vyos` but we get `foo` owner for `/home/vyos` directory. ``` vyos@r14:~$ ls -la /home/vyos total 84 drwxr-xr-x 3 foo users 4096 Aug 28 14:30 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51993 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw------- 1 foo vyattacfg 55 Aug 28 13:10 .history_frr -rw------- 1 foo vyattacfg 20 Aug 28 14:30 .lesshst -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 11:11 .ssh -rw-r--r-- 1 foo users 0 Aug 28 11:12 .sudo_as_admin_successful vyos@r14:~$ ```

Home owner directory changed to `vyos` for the user after reboot. ``` set system login user foo authentication encrypted-password '$6$rounds=656000$J4tyWgIuk9b2x42.$w5Jwizza0dvVa3xOXUIsw60HK5RF3nnfxotE0/9ZRIpXECVtWt3ssI9o0UMoYLt8zKh3jFgro818y5V1Bm0Pr/' ``` Before and after reboot ``` vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 foo users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 14:30 .ssh vyos@r14:~$ reboot vyos@r14:~$ ls -la /home/foo total 28 drwxr-xr-x 3 vyos users 4096 Aug 28 14:31 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 vyos users 51 Aug 28 14:31 .bash_history -rw-r--r-- 1 vyos users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 vyos users 4072 Jan 11 2021 .bashrc -rw-r--r-- 1 vyos users 675 Jan 11 2021 .profile drwxr-xr-x 2 vyos users 4096 Aug 28 14:30 .ssh vyos@r14:~$ ``` Most likely after TACACS+ implementation https://github.com/vyos/vyos-1x/commit/3ec727670de02cac06321719a0323650046d54a1 It also affects key-based authentication (for user vyos). ``` Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh Aug 28 14:48:53 r14 sshd[3157]: Authentication refused: bad ownership or modes for directory /home/vyos/.ssh ``` The thing is there expected `vyos` but we get `foo` owner for `/home/vyos` directory. ``` vyos@r14:~$ ls -la /home/vyos total 84 drwxr-xr-x 3 foo users 4096 Aug 28 14:30 . drwxr-xr-x 1 root root 4096 Aug 28 14:30 .. -rw------- 1 foo users 51993 Aug 28 14:31 .bash_history -rw-r--r-- 1 foo users 220 Apr 24 00:23 .bash_logout -rw-r--r-- 1 foo users 4072 Jan 11 2021 .bashrc -rw------- 1 foo vyattacfg 55 Aug 28 13:10 .history_frr -rw------- 1 foo vyattacfg 20 Aug 28 14:30 .lesshst -rw-r--r-- 1 foo users 675 Jan 11 2021 .profile drwxr-xr-x 2 foo users 4096 Aug 28 11:11 .ssh -rw-r--r-- 1 foo users 0 Aug 28 11:12 .sudo_as_admin_successful vyos@r14:~$ ```