Comment 8 for bug 1377924

Revision history for this message
Eugene San (eugenesan) wrote :

The reason for the failure seems to be in default configuration of PAM for SSH.

If I understand correctly, PAM is configured to enforce session keys revocation upon termination of parent SSHD process:
--- /etc/pam.d/sshd ---
...
# Create a new session keyring.
session optional pam_keyinit.so force revoke
...
---

Some environments connect using ssh and then "detach" from it, which probably causes session key termination.

As a workaround I propose commenting out "force revoke" in /etc/pam.d/sshd.

Note: There might be security related repercussions!