Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-15915

SSH login fails on taverna-vm.apache.org

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: Jan 2018
    • Component/s: VM
    • Labels:
      None
    • Project:
      Incubator

      Description

      Taverna committers stain (myself) and sagar are unable to ssh to taverna-vm.apache.org using our SSH client keys as previously registered on id.apache.org

      ssh to minotaur.apache.org works for both users, so we believe our client keys are OK.

      Perhaps the VM has lost its LDAP connection? Feel free to reboot!



      SSH debug:

      {noformat}
      stain@biggie:~$ ssh -v taverna-vm.apache.org
      OpenSSH_7.2p2 Ubuntu-4ubuntu2.4, OpenSSL 1.0.2g 1 Mar 2016
      debug1: Reading configuration data /home/stain/.ssh/config
      debug1: /home/stain/.ssh/config line 1: Applying options for *
      debug1: Reading configuration data /etc/ssh/ssh_config
      debug1: /etc/ssh/ssh_config line 19: Applying options for *
      debug1: auto-mux: Trying existing master
      debug1: Control socket "/home/stain/.ssh/cm_socket/stain@taverna-vm.apache.org:22" does not exist
      debug1: Connecting to taverna-vm.apache.org [54.144.41.117] port 22.
      debug1: Connection established.
      debug1: identity file /home/stain/.ssh/id_rsa type 1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_rsa-cert type -1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_dsa type -1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_dsa-cert type -1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_ecdsa type -1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_ecdsa-cert type -1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_ed25519 type -1
      debug1: key_load_public: No such file or directory
      debug1: identity file /home/stain/.ssh/id_ed25519-cert type -1
      debug1: Enabling compatibility mode for protocol 2.0
      debug1: Local version string SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
      debug1: Remote protocol version 2.0, remote software version OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
      debug1: match: OpenSSH_7.2p2 Ubuntu-4ubuntu2.4 pat OpenSSH* compat 0x04000000
      debug1: Authenticating to taverna-vm.apache.org:22 as 'stain'
      debug1: SSH2_MSG_KEXINIT sent
      debug1: SSH2_MSG_KEXINIT received
      debug1: kex: algorithm: curve25519-sha256@libssh.org
      debug1: kex: host key algorithm: ecdsa-sha2-nistp256
      debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
      debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
      debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
      debug1: Server host key: ecdsa-sha2-nistp256 SHA256:sZEPxWUv/ApVutzf/nN1ZvVVtg2Pe3euO/YEaCNeyCM
      debug1: Host 'taverna-vm.apache.org' is known and matches the ECDSA host key.
      debug1: Found key in /home/stain/.ssh/known_hosts:101
      debug1: rekey after 134217728 blocks
      debug1: SSH2_MSG_NEWKEYS sent
      debug1: expecting SSH2_MSG_NEWKEYS
      debug1: rekey after 134217728 blocks
      debug1: SSH2_MSG_NEWKEYS received
      debug1: SSH2_MSG_EXT_INFO received
      debug1: kex_input_ext_info: server-sig-algs=<rsa-sha2-256,rsa-sha2-512>
      debug1: SSH2_MSG_SERVICE_ACCEPT received
      debug1: Authentications that can continue: publickey
      debug1: Next authentication method: publickey
      debug1: Offering RSA public key: /home/stain/.ssh/id_rsa
      debug1: Authentications that can continue: publickey
      debug1: Trying private key: /home/stain/.ssh/id_dsa
      debug1: Trying private key: /home/stain/.ssh/id_ecdsa
      debug1: Trying private key: /home/stain/.ssh/id_ed25519
      debug1: No more authentication methods to try.
      Permission denied (publickey).
      {noformat}

      as opposed to minotaur:

      {noformat}
      debug1: Next authentication method: publickey
      debug1: Offering RSA public key: /home/stain/.ssh/id_rsa
      debug1: Server accepts key: pkalg ssh-rsa blen 279
      debug1: Authentication succeeded (publickey).
      {noformat}

        Attachments

          Activity

            People

            • Assignee:
              cml Chris Lambertus
              Reporter:
              stain Stian Soiland-Reyes
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: