Infrastructure » sepia

I reran sepia/new-client. The new output is:

1. sepia/new-client joemario@blazingsaddles
   Please submit the following line to the OpenVPN admin:

joemario@blazingsaddles W9th5kJRsmKHq4o1fZBzUQ cba6a9c4b9003a2628414a938f4c73ebe31c44c577151a8582c3ffc92e7b335a

Hi David:
I am getting AUTH_FAILED errors, as appended below.
To restart clean, I've now rerun "new-client".
The updated output from that (for you) is below.

1. sepia/new-client joemario@blazingsaddles
   Please submit the following line to the OpenVPN admin:

joemario@blazingsaddles OOyTBGVn2N5lN0wfRqzxhw cbd8a6fc9596277a233b6d9113e3a2844718ff902b8f5a087ba474c7e06ab86d

Can you update your "new-client" output for me?  I will update my password in the openvpn network client (from the 2nd line in the secret file).

Thank you.
Joe Mario

// Here is the AUTH_FAILED error I got, as an fyi.

Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: <info> Starting VPN service 'openvpn'...
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3974
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: <info> VPN service 'openvpn' appeared; activating connections
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: <info> VPN plugin state changed: starting (3)
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: (nm-openvpn-service:3974): nm-openvpn-WARNING *: Directory '/var/lib/openvpn/chroot' not usable for chroot by 'nm-openvpn', openvpn will not be chrooted.
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: nm-openvpn-Message: openvpn started with pid 3980
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: <info> VPN connection 'sepia' (ConnectInteractive) reply received.
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: OpenVPN 2.3.10 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 4 2016
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: library versions: OpenSSL 1.0.2f-fips 28 Jan 2016, LZO 2.08
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: WARNING: file '/etc/openvpn/sepia/tlsauth' is group or others accessible
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: Control Channel Authentication: using '/etc/openvpn/sepia/tlsauth' as a OpenVPN static key file
Feb 05 15:34:19 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Feb 05 15:34:19 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: UDPv4 link local: [undef]
Feb 05 15:34:19 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: UDPv4 link remote: [AF_INET]8.43.84.129:1194
Feb 05 15:34:20 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: [openvpn-sepia] Peer Connection Initiated with [AF_INET]8.43.84.129:1194
Feb 05 15:34:23 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: AUTH: Received control message: AUTH_FAILED
Feb 05 15:34:23 blazingsaddles.bos.redhat.com nm-openvpn³⁹⁸⁰: SIGUSR1[soft,auth-failure] received, process restarting
Feb 05 15:34:23 blazingsaddles.bos.redhat.com NetworkManager¹⁰⁰²: (nm-openvpn-service:3974): nm-openvpn-WARNING *: Password verification failed

Hi David:
I am now able to create the VPM and get to the login prompt for teuthology.front.sepia.ceph.com.
Thank you.

However, when I try to login using "ssh joemario@teuthology.front.sepia.ceph.com" and my password for this tracker.ceph.com acct, I keep getting "Permission denied, please try again."

Is that the account name and password I should be using?

Thank you.
Joe

Your user was set up as 'jmario' so you'd:

ssh -i /home/jmario/.ssh/id_rsa jmario@teuthology.front.sepia.ceph.com

Hi David:
That was it. Thank you for all your help.

Joe