[one-users] ssh password less login not function

[Valentin Bud]

Hello Amier,


On Wed, Oct 2, 2013 at 9:16 AM, Amier Anis <mymabma at gmail.com> wrote:

> *Hi Guys,*
>
> I'm having issue with ssh password less login not function correctly.
> It's work with fresh install CentOS 6.4 before install opennebula. Once
> opennebula started, it doesn't work any more. The workers node can login
> with less password without any issue but management node can't login to
> worker nodes.
>

I see you're using CentOS as OS. Have you installed OpenNebula from
packages [1]? Have you configured SSH as
pointed in [1]. I mean the ~/.ssh/config part.

Another important aspect is SELINUX. Is it on or off? If it on check the
/var/lib/one/.ssh context, it should have ssh_home_t as label.
You can accomplish that using chcon -R -t ssh_home_t /var/lib/one/.ssh as
either oneadmin or root.


>
> At first attempt, I install opennebula then setup the ssh-keygen to
> oneadmin (created during installation) and I also hv tried to create
> oneadmin first then install opennebula but both failed
>

> If the mgmt server can ssh with password less to workers then the mgmt
> server can't ssh to itself as the mgmt server also have the vm.
>

I suggest you install OpenNebula from packages and work your way up from
there. Don't forget to check the SELINUX context of oneadmin's ~/.ssh and
either SSH to
hosts in advance or configure SSH via ~/.ssh/config to allow connections
without StrictHostKeyChecking.


>
> *My Setup*
>
>    1. I only export and share /var/lib/one/datastores to every workers
>    2. authorized_keys has been export to every wokers vice versa.
>    3. declared every hostname in /etc/hosts
>
> Is there any issue or things that i need to look into it.
>
> Thanks you.
>
If you need more help in the future be sure to come back and ask for it :).
Enjoy.


>
>
>
> *.: Amier Anis :.*
> Mobile: +6012-260-0819
>

[1]: http://opennebula.org/documentation:rel4.2:ignc#centos_platform_notes


Good Will,
-- 
Valentin Bud
http://databus.pro | valentin at databus.pro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20131002/6cabea8b/attachment-0002.htm>