Support #21302
closedSepia Lab Access Request
0%
Description
1) Do you just need VPN access or will you also be running teuthology jobs?
running teuthology jobs
2) Desired Username:
liupan
3) Alternate e-mail address(es) we can reach you at:
liupan1111@gmail.com
4) If you don't already have an established history of code contributions to Ceph, is there an existing community or core developer you've worked with who has reviewed your work and can vouch for your access request?
https://github.com/liupan1111
If you answered "No" to # 4, please answer the following (paste directly below the question to keep indentation):
4a) Paste a link to a Blueprint or planning doc of yours that was reviewed at a Ceph Developer Monthly.
4b) Paste a link to an accepted pull request for a major patch or feature.
4c) If applicable, include a link to the current project (planning doc, dev branch, or pull request) that you are looking to test.
5) Paste your SSH public key(s) between the pre tags
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC3aWYoBDxRh13e+qver2xcmCtNsiVEt9NkN1cntdUxVbjfWgb+E/b54kPW456tswoVaYS+3xI5DYTPTN1tMhx8jnrgVKI2HhIYC3SO0+V+HNofzU1p7v5CfZxwyupXOgdfHmEWKOepPop8qWon8wZVUkj2t80w8Ifxh5gLVigGquc4kvMLyy6nBI0k6UGeRr9lSKmWLvzudWP70cWij3ynwxEeIuurU0HI9tDmjaVW5dJuu6IZHDhJrCpeUZBQIDqjH0pg1i1uXXwwiLI9NW8jWuALREDeMxAG4IgOZtoXdS7J9vVXHxKpa8ofb+qYNXI7B3OTLgjSS2ziiU1KEIr wanjun.lp@alibaba-inc.com
6) Paste your hashed VPN credentials between the pre tags (Format: user@hostname 22CharacterSalt 65CharacterHashedPassword)
liupan@ceph-dev-2 9+Is4mIZgNkYyJLwHvSNOA 5a8fafc187d52041daf4365125692d4619fc557b75560913130c0596f83bbb77
Updated by Pan Liu over 6 years ago
Hi Sage, as we talked by email, I created a ticket. Please help accept this. Thanks.
Updated by Pan Liu over 6 years ago
Pan Liu wrote:
Hi Sage, I created a ticket. Please help accept this. Thanks.
Updated by David Galloway over 6 years ago
- Category set to User access
- Status changed from New to 4
- Assignee set to David Galloway
H,
You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh liupan@teuthology.front.sepia.ceph.com using the private key matching the pubkey you provided.
Thanks.
Updated by Pan Liu over 6 years ago
I met the error below, could you give me some help?
[root@ceph-dev-2 /home/wanjun.lp]
#systemctl restart openvpn@sepia.service
[root@ceph-dev-2 /home/wanjun.lp]
#ssh liupan@teuthology.front.sepia.ceph.com
ssh: connect to host teuthology.front.sepia.ceph.com port 22: Connection timed out
Updated by David Galloway over 6 years ago
Hi, sorry, yes. It doesn't look like you've successfully connected to the VPN yet based on server logs.
Can you send me output of systemctl status openvpn@sepia; journalctl -u openvpn@sepia please?
Updated by Pan Liu over 6 years ago
@David Galloway
The output of "systemctl status openvpn@sepia; journalctl -u openvpn@sepia" is below:
-- Logs begin at Tue 2017-08-15 01:17:17 CST, end at Wed 2017-09-27 11:15:01 CST. --
Sep 14 19:07:12 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:07:12 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:07:18 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:18 2017 failed to find GID for group nogroup
Sep 14 19:07:18 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:18 2017 Exiting due to fatal error
Sep 14 19:07:18 ceph-dev-2 systemd1: openvpn@sepia.service: main process exited, code=exited, status=1/FAILURE
Sep 14 19:07:18 ceph-dev-2 systemd1: Unit openvpn@sepia.service entered failed state.
Sep 14 19:07:18 ceph-dev-2 systemd1: openvpn@sepia.service failed.
Sep 14 19:08:26 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:08:26 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:08:27 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:27 2017 failed to find GID for group nogroup
Sep 14 19:08:27 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:27 2017 Exiting due to fatal error
Sep 14 19:08:27 ceph-dev-2 systemd1: openvpn@sepia.service: main process exited, code=exited, status=1/FAILURE
Sep 14 19:08:27 ceph-dev-2 systemd1: Unit openvpn@sepia.service entered failed state.
Sep 14 19:08:27 ceph-dev-2 systemd1: openvpn@sepia.service failed.
Sep 14 19:10:24 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:10:24 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 failed to find GID for group nogroup
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 Exiting due to fatal error
Sep 14 19:10:24 ceph-dev-2 systemd1: openvpn@sepia.service: main process exited, code=exited, status=1/FAILURE
Sep 14 19:10:24 ceph-dev-2 systemd1: Unit openvpn@sepia.service entered failed state.
Sep 14 19:10:24 ceph-dev-2 systemd1: openvpn@sepia.service failed.
Sep 14 19:10:31 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:10:31 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 failed to find GID for group nogroup
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 Exiting due to fatal error
Sep 14 19:10:31 ceph-dev-2 systemd1: openvpn@sepia.service: main process exited, code=exited, status=1/FAILURE
Sep 14 19:10:31 ceph-dev-2 systemd1: Unit openvpn@sepia.service entered failed state.
Sep 14 19:10:31 ceph-dev-2 systemd1: openvpn@sepia.service failed.
Sep 14 19:14:24 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:14:24 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 failed to find GID for group nogroup
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 Exiting due to fatal error
Sep 14 19:14:24 ceph-dev-2 systemd1: openvpn@sepia.service: main process exited, code=exited, status=1/FAILURE
Sep 14 19:14:24 ceph-dev-2 systemd1: Unit openvpn@sepia.service entered failed state.
Sep 14 19:14:24 ceph-dev-2 systemd1: openvpn@sepia.service failed.
Updated by David Galloway over 6 years ago
Looks like you need to change the group and/or user in the Sepia VPN config.