[one-users] User couldn't be authenticated, aborting call.

[Tino Vazquez]

Hi,

The oneadmin user cannot be authenticated using other mechanism than
user:password. That is, you need to manually create the $ONE_AUTH
file, start opennebula, and then use the ssh auth module with "oneuser
create" to create new users, and "oneauth login" to auth those users.

Regards,

-Tino

--
Constantino Vázquez Blanco, MSc
OpenNebula Major Contributor
www.OpenNebula.org | @tinova79



2011/2/22 christophe bonnaud <takyon77 at gmail.com>:
> hum ok,
>
> the one_auth file which is working just contain "oneadmin:<password>"....
>
> Does that mean this file should be created manually for oneadmin and should
> not be created using "oneauth login oneadmin"??
>
>
> Cheers,
>
> Chris.
>
> 2011/2/22 christophe bonnaud <takyon77 at gmail.com>
>>
>> Hi,
>>
>> It found a strange thing today:
>>
>> I installed opennebula from a yum repository, ie without using the source
>> from the opennebula web site and it was working. With this installation, no
>> need to create the file one_auth using "oneauth login oneadmin" because it
>> is generated by the rpm itself.
>>
>> On the system which was not working, I stoped the opennebula services and
>> deleted the one.db file and one_auth file.
>> After that I just copied the one_auth file from the system working,
>> restarted opennebula and the problem disappeared!
>>
>> So it seems that with the official version, doing the command "oneauth
>> login oneadmin" do not generates the correct one_auth file...
>>
>> Does anyone have an idea why?
>> Is it the correct command?
>>
>> Cheers,
>>
>> Chris.
>>
>>
>> 2011/2/21 christophe bonnaud <takyon77 at gmail.com>
>>>
>>> Hi,
>>>
>>> I tried to reinstalled opennebula using oneadmin user, I made the
>>> compilation from sources using scons.
>>>
>>> After that I did the following commands as oneadmin user:
>>>
>>> export RUBYLIB=/usr/lib/one/ruby/
>>> export ONE_LOCATION=/etc/one
>>> export ONE_XMLRPC="http://localhost:2633/RPC2"
>>>  export PATH="/etc/one/bin:"$PATH
>>>
>>>  oneauth login oneadmin
>>> export ONE_AUTH=/home/oneadmin/.one/one_ssh
>>>
>>> one start
>>>      oned and scheduler started
>>>
>>> onehost list
>>>       Error: [HostPoolInfo] User couldn't be authenticated, aborting
>>> call.
>>>
>>> no files were existing before (sqlite db, conf, etc..), so no changes
>>> have been done one "ssh_one" file after the first start of "one" daemon.
>>>
>>> in my sqlite db, I have the following:
>>>
>>> sqlite> select * from user_pool;
>>> 0|oneadmin|23b2a94066e351bd18aa0d97db3d4a7b0cb98adb|1
>>>
>>>
>>> I don't have any references to check if this information is correct.
>>>
>>> I tried to increase the log level in oned.conf but no usefull
>>> informations appear there...
>>>
>>>
>>> Cheers,
>>>
>>> Chris.
>>>
>>>
>>>
>>> 2011/2/21 Idafen Santana Pérez <idafensp at gmail.com>
>>>>
>>>> Hi,
>>>>
>>>> I was having almost the same problem and I solved it by reinstalling
>>>> opennebula with the right sqlite support and compiling it (I used
>>>> scons to install it from source) as oneadmin user.
>>>>
>>>> You should check your oneadmin user information at your sqlite db (or
>>>> mysql).
>>>>
>>>> Hope it helps.
>>>>
>>>> Regards
>>>> Idafen
>>>>
>>>> On Mon, Feb 21, 2011 at 12:02 PM, Tino Vazquez <tinova at opennebula.org>
>>>> wrote:
>>>> > Hi,
>>>> >
>>>> > The file pointed by ONE_AUTH when oned is first started sets the
>>>> > username and password for the ID=0 account (the oneadmin account). If
>>>> > this files changes, or the env variable shifts to point to another
>>>> > file, you will get the could not authenticate error message.
>>>> >
>>>> > Regards,
>>>> >
>>>> > -Tino
>>>> >
>>>> > --
>>>> > Constantino Vázquez Blanco, MSc
>>>> > OpenNebula Major Contributor  / Cloud Researcher
>>>> > www.OpenNebula.org | @tinova79
>>>> >
>>>> >
>>>> >
>>>> > On Mon, Feb 21, 2011 at 7:52 AM, christophe bonnaud
>>>> > <takyon77 at gmail.com> wrote:
>>>> >> Hi Richard,
>>>> >>
>>>> >> Thanks a lot for your answer.
>>>> >>
>>>> >> I checked but on my system all process for opennebula are owned by
>>>> >> the
>>>> >> oneadmin user.
>>>> >> I did a reinstallation of the server to have a self-contained
>>>> >> installation
>>>> >> so now all opennebula's files are owned by oneadmin user.
>>>> >> Unfortunately the problem reappeared...
>>>> >>
>>>> >> I don't really know how to solve this problem. I did some research
>>>> >> but it
>>>> >> seems that this problem is not really common and I couldn't find any
>>>> >> usefull
>>>> >> informations.
>>>> >>
>>>> >> Can I ask you which ruby/opennebula version you are using? I am not
>>>> >> sure
>>>> >> it's rely to the problem but I have to consider all possibilities.
>>>> >>
>>>> >> Cheers,
>>>> >>
>>>> >> Chris.
>>>> >>
>>>> >>
>>>> >> On Fri, Feb 18, 2011 at 5:17 PM, Whiffen, Richard
>>>> >> <Richard_Whiffen at cable.comcast.com> wrote:
>>>> >>>
>>>> >>> Christophe,
>>>> >>>
>>>> >>> I'm new to OpenNebula, so I'm not sure if this will help or not.
>>>> >>>  When I
>>>> >>> was getting started I had the same problems. For some reason when I
>>>> >>> would
>>>> >>> do a 'sudo su - oneadmin' it would still use my (root) .ssh settings
>>>> >>> and
>>>> >>> not the oneadmin user.  Worse, some processes would be started with
>>>> >>> UID
>>>> >>> root rather than oneadmin.  I had to kill the schedule process as
>>>> >>> root, it
>>>> >>> wouldn't quit on it's own, and chown the log files to oneadmin
>>>> >>> again.
>>>> >>> After that, the ssh authentication issues went away.
>>>> >>>
>>>> >>> Rich
>>>> >>>
>>>> >>> --
>>>> >>> Rich Whiffen
>>>> >>> richard_whiffen at cable.comcast.com
>>>> >>> AIM: richwhiffen
>>>> >>> Yahoo: richwhiffen
>>>> >>> Phone: 202-449-1312
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>> >
>>>> >>> >Message: 4
>>>> >>> >Date: Thu, 17 Feb 2011 08:42:58 -0800
>>>> >>> >From: christophe bonnaud <takyon77 at gmail.com>
>>>> >>> >To: Users at lists.opennebula.org
>>>> >>> >Subject: [one-users] User couldn't be authenticated, aborting call.
>>>> >>> >Message-ID:
>>>> >>> >    <AANLkTikVG6yB=9Vi7Lv_gMpApHVFnbqTWswWZmrnU5d8 at mail.gmail.com>
>>>> >>> >Content-Type: text/plain; charset="iso-8859-1"
>>>> >>> >
>>>> >>> >Hi,
>>>> >>> >
>>>> >>> >I have just installed opennebula ver 2.0.1-1.
>>>> >>> >I have created a ssh key for oneadmin user, run the command:
>>>> >>> >
>>>> >>> >     oneauth login oneadmin
>>>> >>> >
>>>> >>> >and exported the variable:
>>>> >>> >
>>>> >>> >     export ONE_AUTH="/home/oneadmin/.one/one_ssh"
>>>> >>> >
>>>> >>> >I have correctly start oned using the command (as oneadmin user):
>>>> >>> >
>>>> >>> >     one start
>>>> >>> >
>>>> >>> >But now all commands I am trying fail with an error:
>>>> >>> >
>>>> >>> >     User couldn't be authenticated, aborting call.
>>>> >>> >
>>>> >>> >Did I miss something? is there an other step to do to allow
>>>> >>> > oneadmin to
>>>> >>> >issue some commands?
>>>> >>> >
>>>> >>> >Cheers,
>>>> >>> >
>>>> >>> >Christophe bonnaud.
>>>> >>>
>>>> >>> _______________________________________________
>>>> >>> Users mailing list
>>>> >>> Users at lists.opennebula.org
>>>> >>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>>> >>
>>>> >>
>>>> >>
>>>> >> --
>>>> >> ------------------------------------------------------
>>>> >> Bonnaud Christophe
>>>> >> GSDC
>>>> >> Korea Institute of Science and Technology Information
>>>> >> Fax. +82-42-869-0789
>>>> >> Tel. +82-42-869-0660
>>>> >> Mobile +82-10-4664-3193
>>>> >>
>>>> >> _______________________________________________
>>>> >> Users mailing list
>>>> >> Users at lists.opennebula.org
>>>> >> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>>> >>
>>>> >>
>>>> > _______________________________________________
>>>> > Users mailing list
>>>> > Users at lists.opennebula.org
>>>> > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>>> >
>>>
>>>
>>>
>>> --
>>> ------------------------------------------------------
>>> Bonnaud Christophe
>>> GSDC
>>> Korea Institute of Science and Technology Information
>>> Fax. +82-42-869-0789
>>> Tel. +82-42-869-0660
>>> Mobile +82-10-4664-3193
>>
>>
>>
>> --
>> ------------------------------------------------------
>> Bonnaud Christophe
>> GSDC
>> Korea Institute of Science and Technology Information
>> Fax. +82-42-869-0789
>> Tel. +82-42-869-0660
>> Mobile +82-10-4664-3193
>
>
>
> --
> ------------------------------------------------------
> Bonnaud Christophe
> GSDC
> Korea Institute of Science and Technology Information
> Fax. +82-42-869-0789
> Tel. +82-42-869-0660
> Mobile +82-10-4664-3193
>