SSH: Unable to get valid context

[davidism]

I'm trying to get openssh-server working on a fresh install of Fedora 14. I start sshd then try to log in over ssh from another computer. The following error is returned:

Unable to get valid context for xxxxxxxx
Last login: Thu Dec  9 11:52:10 2010 from xxxxxxxx
Connection to xxx.xxx.xxx.xxx closed.

I've done some research, and it seems to have to do with SELinux. However, none of the solutions I came across worked, or they were not clear enough on what to do.
Can someone who has had and fixed this problem explain exactly what to do?

[bob]

(Sorry for the "moderation" delay there. "XXX" kinda triggers a block on a post until we can check it out.

[scott32746]

Hello,
To test SELinux you can disable, then test your connection.
Then you know that SELinux is the problem.

vi /etc/sysconfig/selinux
SELINUX=disabled
reboot

[jpollard]

How did you install openssh?

Using the repositories should have installed the binary with suitable labels
that will grant the proper context.

Next, if SELinux was denying sshd a context, there should be a log entry
which includes the directions on how to enable it.

[davidism]

Hello,
To test SELinux you can disable, then test your connection.
Then you know that SELinux is the problem.

vi /etc/sysconfig/selinux
SELINUX=disabled
reboot

With SELinux disabled, I can successfully connect.

How did you install openssh?

Using the repositories should have installed the binary with suitable labels
that will grant the proper context.

Next, if SELinux was denying sshd a context, there should be a log entry
which includes the directions on how to enable it.
Today 01:53 PM

It was installed be default.
What is the path of the log file?

[jpollard]

The file is /var/log/audit/*

You should be able to see any of the alerts as interpreted by the utility
"sealert", which is a GUI interface, and provides suggestions for allowing
certain operations.

Normally, sshd will not have problems as everything will have been installed appropriately.

But there are conditions - for instance, user home directories. If the user
is added manually, then SELinux labels will not necessarily be correct.
This can be the a source of "cannot set context" because the user is not
fully set up.

[leigh123linux]

(Sorry for the "moderation" delay there. "XXX" kinda triggers a block on a post until we can check it out.

Fixed ..........