Project

General

Profile

Support #21302

Sepia Lab Access Request

Added by Pan Liu over 4 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Category:
User access
Target version:
-
% Done:

0%

Tags:
Reviewed:
Affected Versions:

Description

1) Do you just need VPN access or will you also be running teuthology jobs?
running teuthology jobs

2) Desired Username:
liupan

3) Alternate e-mail address(es) we can reach you at:

4) If you don't already have an established history of code contributions to Ceph, is there an existing community or core developer you've worked with who has reviewed your work and can vouch for your access request?
https://github.com/liupan1111

If you answered "No" to # 4, please answer the following (paste directly below the question to keep indentation):

4a) Paste a link to a Blueprint or planning doc of yours that was reviewed at a Ceph Developer Monthly.

4b) Paste a link to an accepted pull request for a major patch or feature.

4c) If applicable, include a link to the current project (planning doc, dev branch, or pull request) that you are looking to test.

5) Paste your SSH public key(s) between the pre tags

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC3aWYoBDxRh13e+qver2xcmCtNsiVEt9NkN1cntdUxVbjfWgb+E/b54kPW456tswoVaYS+3xI5DYTPTN1tMhx8jnrgVKI2HhIYC3SO0+V+HNofzU1p7v5CfZxwyupXOgdfHmEWKOepPop8qWon8wZVUkj2t80w8Ifxh5gLVigGquc4kvMLyy6nBI0k6UGeRr9lSKmWLvzudWP70cWij3ynwxEeIuurU0HI9tDmjaVW5dJuu6IZHDhJrCpeUZBQIDqjH0pg1i1uXXwwiLI9NW8jWuALREDeMxAG4IgOZtoXdS7J9vVXHxKpa8ofb+qYNXI7B3OTLgjSS2ziiU1KEIr wanjun.lp@alibaba-inc.com

6) Paste your hashed VPN credentials between the pre tags (Format: user@hostname 22CharacterSalt 65CharacterHashedPassword)

liupan@ceph-dev-2 9+Is4mIZgNkYyJLwHvSNOA 5a8fafc187d52041daf4365125692d4619fc557b75560913130c0596f83bbb77

History

#1 Updated by Pan Liu over 4 years ago

Hi Sage, as we talked by email, I created a ticket. Please help accept this. Thanks.

#2 Updated by Pan Liu over 4 years ago

Pan Liu wrote:

Hi Sage, I created a ticket. Please help accept this. Thanks.

#3 Updated by Sage Weil over 4 years ago

+1

#4 Updated by David Galloway over 4 years ago

  • Category set to User access
  • Status changed from New to 4
  • Assignee set to David Galloway

H,

You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh liupan@teuthology.front.sepia.ceph.com using the private key matching the pubkey you provided.

Thanks.

#5 Updated by Pan Liu over 4 years ago

I met the error below, could you give me some help?

[root@ceph-dev-2 /home/wanjun.lp]
#systemctl restart

[root@ceph-dev-2 /home/wanjun.lp]
#ssh
ssh: connect to host teuthology.front.sepia.ceph.com port 22: Connection timed out

#6 Updated by Pan Liu over 4 years ago

@David Galloway

Could you give help?
Thanks!

#7 Updated by David Galloway over 4 years ago

Hi, sorry, yes. It doesn't look like you've successfully connected to the VPN yet based on server logs.

Can you send me output of systemctl status openvpn@sepia; journalctl -u openvpn@sepia please?

#8 Updated by Pan Liu over 4 years ago

@David Galloway

The output of "systemctl status openvpn@sepia; journalctl -u openvpn@sepia" is below:

-- Logs begin at Tue 2017-08-15 01:17:17 CST, end at Wed 2017-09-27 11:15:01 CST. --
Sep 14 19:07:12 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:07:12 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:07:12 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:12 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:07:18 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:18 2017 failed to find GID for group nogroup
Sep 14 19:07:18 ceph-dev-2 openvpn19550: Thu Sep 14 19:07:18 2017 Exiting due to fatal error
Sep 14 19:07:18 ceph-dev-2 systemd1: : main process exited, code=exited, status=1/FAILURE
Sep 14 19:07:18 ceph-dev-2 systemd1: Unit entered failed state.
Sep 14 19:07:18 ceph-dev-2 systemd1: failed.
Sep 14 19:08:26 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:08:26 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:08:26 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:26 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:08:27 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:27 2017 failed to find GID for group nogroup
Sep 14 19:08:27 ceph-dev-2 openvpn20134: Thu Sep 14 19:08:27 2017 Exiting due to fatal error
Sep 14 19:08:27 ceph-dev-2 systemd1: : main process exited, code=exited, status=1/FAILURE
Sep 14 19:08:27 ceph-dev-2 systemd1: Unit entered failed state.
Sep 14 19:08:27 ceph-dev-2 systemd1: failed.
Sep 14 19:10:24 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:10:24 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 failed to find GID for group nogroup
Sep 14 19:10:24 ceph-dev-2 openvpn21118: Thu Sep 14 19:10:24 2017 Exiting due to fatal error
Sep 14 19:10:24 ceph-dev-2 systemd1: : main process exited, code=exited, status=1/FAILURE
Sep 14 19:10:24 ceph-dev-2 systemd1: Unit entered failed state.
Sep 14 19:10:24 ceph-dev-2 systemd1: failed.
Sep 14 19:10:31 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:10:31 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 failed to find GID for group nogroup
Sep 14 19:10:31 ceph-dev-2 openvpn21193: Thu Sep 14 19:10:31 2017 Exiting due to fatal error
Sep 14 19:10:31 ceph-dev-2 systemd1: : main process exited, code=exited, status=1/FAILURE
Sep 14 19:10:31 ceph-dev-2 systemd1: Unit entered failed state.
Sep 14 19:10:31 ceph-dev-2 systemd1: failed.
Sep 14 19:14:24 ceph-dev-2 systemd1: Starting OpenVPN Robust And Highly Flexible Tunneling Application On sepia...
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 WARNING: file 'sepia/tlsauth' is group or others accessible
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 OpenVPN 2.4.3 x86_64-redhat-linux-gnu [Fedora EPEL patched] [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 21 2017
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.06
Sep 14 19:14:24 ceph-dev-2 systemd1: Started OpenVPN Robust And Highly Flexible Tunneling Application On sepia.
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 failed to find GID for group nogroup
Sep 14 19:14:24 ceph-dev-2 openvpn23124: Thu Sep 14 19:14:24 2017 Exiting due to fatal error
Sep 14 19:14:24 ceph-dev-2 systemd1: : main process exited, code=exited, status=1/FAILURE
Sep 14 19:14:24 ceph-dev-2 systemd1: Unit entered failed state.
Sep 14 19:14:24 ceph-dev-2 systemd1: failed.

#9 Updated by David Galloway over 4 years ago

Looks like you need to change the group and/or user in the Sepia VPN config.

See https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux

#10 Updated by Pan Liu over 4 years ago

It works now, thanks!

#11 Updated by David Galloway over 4 years ago

  • Status changed from 4 to Resolved

Also available in: Atom PDF