how to add a user with rights to login via ssh on selinux?

["Romix" <romix@php.cd>]

Hi,

i have seen that a similar problem has been discussed on this list some
months ago, but that didn´t help me... :-/

im running selinux und want to create a user that has the right to login 
via ssh.
i created a user called setest:
# suseradd -m setest

i gave him a password:  
# sadminpasswd setest
...

i added the line "user setest roles { user_r sysadm_r };" to 
/etc/security/selinux/src/policy/users 

i applied the changes: 
# make -C /etc/security/selinux/src/policy load

and my /etc/security/default_contexts looks like this:

system_r:local_login_t  staff_r:staff_t user_r:user_t
system_r:sshd_t         staff_r:staff_t user_r:user_t 
system_r:crond_t        staff_r:staff_crond_t user_r:user_crond_t 
system_r:system_crond_t

if i right understand this should be enough, but my user setest can´t 
login, after typing in the password i get the message:
Connection to 10.0.0.11 closed by remote host.
Connection to 10.0.0.11 closed.

in the sshd-log i have the following lines:
Sep  8 20:45:17 [sshd] Accepted password for setest from 10.0.0.23 port 
33571 ssh2
Sep  8 20:45:17 [sshd] fatal: Could not obtain SID for user setest
Sep  8 20:45:17 [sshd] syslogin_perform_logout: logout() returned an 
error


what did i forgot or what do i wrong? can someone help me? thx.

cu, Romain



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.