Project

General

Profile

Actions

Support #44462

closed

Sepia Lab Access Request

Added by Kalpesh Pandya about 4 years ago. Updated almost 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
User access
Target version:
-
% Done:

0%

Tags:
Reviewed:
Affected Versions:

Description

1) Do you just need VPN access or will you also be running teuthology jobs? Will be running teuthology tests

2) Desired Username: kapandya

3) Alternate e-mail address(es) we can reach you at:

4) If you don't already have an established history of code contributions to Ceph, is there an existing community or core developer you've worked with who has reviewed your work and can vouch for your access request? Yes, Matt Benjamin.

If you answered "No" to # 4, please answer the following (paste directly below the question to keep indentation):

4a) Paste a link to a Blueprint or planning doc of yours that was reviewed at a Ceph Developer Monthly.

4b) Paste a link to an accepted pull request for a major patch or feature.

4c) If applicable, include a link to the current project (planning doc, dev branch, or pull request) that you are looking to test.

5) Paste your SSH public key(s) between the pre tags

ssh-rsa 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 kapandya@localhost.localdomain

6) Paste your hashed VPN credentials between the pre tags (Format: user@hostname 22CharacterSalt 65CharacterHashedPassword)

kapandya@thinkpad elavnUlTLKzuE7/eJ2nxMw 4ac31f4c197b2b6325a404950175faeedc105ea45092672e924b6edafe90af23


Files

Output.pdf (36.2 KB) Output.pdf Kalpesh Pandya, 03/15/2020 05:46 PM
Openssh Private key.pdf (31.6 KB) Openssh Private key.pdf Kalpesh Pandya, 05/12/2020 03:29 PM
New pub key.docx (6.41 KB) New pub key.docx Kalpesh Pandya, 05/18/2020 08:27 PM
Actions #1

Updated by adam kraitman about 4 years ago

  • Category set to User access
  • Status changed from New to In Progress
  • Assignee set to adam kraitman

Hey Matt Benjamin,
can you vouch for his access request?

Thanks

Actions #2

Updated by Matt Benjamin about 4 years ago

Hi Adam,

Yes, Kalpesh is an intern working for my team in BLR.

thanks,

Matt

Actions #3

Updated by adam kraitman about 4 years ago

Hi Kalpesh Pandya,

You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh using the private key matching the pubkey you provided.

Be sure to check out the following links for final workstation setup steps:
https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#vpn_client_access
https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess#ssh_config

Most developers choose to schedule runs from the shared teuthology VM. For information on that, see http://docs.ceph.com/teuthology/docs/intro_testers.html

Thanks.

Actions #4

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hi Kalpesh Pandya,

You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh using the private key matching the pubkey you provided.

Be sure to check out the following links for final workstation setup steps:
https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#vpn_client_access
https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess#ssh_config

Most developers choose to schedule runs from the shared teuthology VM. For information on that, see http://docs.ceph.com/teuthology/docs/intro_testers.html

Thanks.

Hello Adam,

I was not able to access when trying to use: ssh
Then I went through https://tracker.ceph.com/issues/43518 and used the command: rm -rf /etc/openvpn/*sepia* /etc/openvpn-client/*sepia*

So following is my new Hashed VPN Credentials:
kapandya@thinkpad Uw1JHj0kPIqSd9iOJ68TNg 46badc3b5cd150bfb74daf4300c8329491000521738ba70455631aa4a47e42c0

Can you please give me the access again.

Sorry for the inconvenience caused.

Thank you in advance,
Kalpesh Pandya

Actions #5

Updated by adam kraitman about 4 years ago

Hey, Kalpesh Pandya
Please try now, vpn hash updated

Thanks,

Adam

Actions #6

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hey, Kalpesh Pandya
Please try now, vpn hash updated

Thanks,

Adam

Hello Adam,

I'm still facing some issue as mentioned below:

1) I followed the steps mentioned in https://wiki.sepia.ceph.com/doku.php?id=vpnaccess. But when I'm trying to execute the last command: sudo systemctl enable openvpn-client@sepia it shows me the following output: ssh: connect to host teuthology.front.sepia.ceph.com port 22: Connection timed out.

FYI:

1) I'm connected to the VPN

2) I'm new to this so, it would be great if you help me out for solving this issue.

Thank you in advance.

Kalpesh Pandya

Actions #7

Updated by adam kraitman about 4 years ago

Thank you Kalpesh Pandya,

Can you please paste the output of "journalctl -u openvpn-client@sepia"

Actions #8

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Thank you Kalpesh Pandya,

Can you please paste the output of "journalctl -u openvpn-client@sepia"

Hello Adam,

I've attached a pdf for the output of command.

Thanks,
Kalpesh Pandya

Actions #9

Updated by adam kraitman about 4 years ago

Hey Kalpesh Pandya, I think it happens because SELinux is active please try editing /etc/sysconfig/selinux and setting SELINUX=permissive, this will require a reboot and after the reboot run the following commands
sudo systemctl enable openvpn-client@sepia
sudo systemctl start openvpn-client@sepia
and check the status
sudo systemctl status openvpn-client@sepia

Thanks,

Adam

Actions #10

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hey Kalpesh Pandya, I think it happens because SELinux is active please try editing /etc/sysconfig/selinux and setting SELINUX=permissive, this will require a reboot and after the reboot run the following commands
sudo systemctl enable openvpn-client@sepia
sudo systemctl start openvpn-client@sepia
and check the status
sudo systemctl status openvpn-client@sepia

Thanks,

Adam

Hey Adam,

I got your point of editing selinux, but I didn't got your reboot part. Can you please guide me that how can I do this?

Thank you in advance.

Kalpesh Pandya

Actions #11

Updated by adam kraitman about 4 years ago

Hi Kalpesh Pandya,
It means that after changing the SElinux settings you will need to reboot your laptop

Actions #12

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hi Kalpesh Pandya,
It means that after changing the SElinux settings you will need to reboot your laptop

Hello Adam,

Will follow the steps and get back to you.

Thank you,

Kalpesh Pandya

Actions #13

Updated by adam kraitman about 4 years ago

Hi, Any update ?

Actions #14

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hi, Any update ?

Hey, was little busy with some other work. Now I'm trying to do this and will get back to you soon.

Sorry for the inconvenience caused.

Thanks,
Kalpesh Pandya

Actions #15

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hi Kalpesh Pandya,
It means that after changing the SElinux settings you will need to reboot your laptop

I opened the file selinux but it's a read only file. So it is not allowing me to edit SELINUX to permissive. Can you please help me out here?

Actions #16

Updated by Kalpesh Pandya about 4 years ago

Kalpesh Pandya wrote:

adam kraitman wrote:

Hi Kalpesh Pandya,
It means that after changing the SElinux settings you will need to reboot your laptop

I opened the file selinux but it's a read only file. So it is not allowing me to edit SELINUX to permissive. Can you please help me out here?

Hello,

Nevermind this.

I changed the settings of selinux to permissive and ran the said commands after the reboot. Following is the output for sudo systemctl status openvpn-client@sepia:

- OpenVPN tunnel for sepia
Loaded: loaded (/usr/lib/systemd/system/openvpn-client@.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2020-04-20 12:23:14 IST; 5s ago
Docs: man:openvpn(8)
https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
https://community.openvpn.net/openvpn/wiki/HOWTO
Process: 4009 ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config sepia.conf (code=exited, status=1/FAILURE)
Main PID: 4009 (code=exited, status=1/FAILURE)
Status: "Pre-connection initialization successful"

Apr 20 12:23:10 localhost.localdomain openvpn4009: WARNING: file 'sepia/tlsauth' is group or others accessible
Apr 20 12:23:10 localhost.localdomain openvpn4009: OpenVPN 2.4.8 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov 1 2019
Apr 20 12:23:10 localhost.localdomain openvpn4009: library versions: OpenSSL 1.1.1d FIPS 10 Sep 2019, LZO 2.08
Apr 20 12:23:10 localhost.localdomain systemd1: Started OpenVPN tunnel for sepia.
Apr 20 12:23:10 localhost.localdomain openvpn4009: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 20 12:23:10 localhost.localdomain openvpn4009: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 20 12:23:14 localhost.localdomain openvpn4009: failed to find GID for group nogroup
Apr 20 12:23:14 localhost.localdomain openvpn4009: Exiting due to fatal error
Apr 20 12:23:14 localhost.localdomain systemd1: : Main process exited, code=exited, status=1/FAILURE
Apr 20 12:23:14 localhost.localdomain systemd1: : Failed with result 'exit-code'.

Thanks,
Kalpesh Pandya

Actions #17

Updated by Kalpesh Pandya about 4 years ago

Kalpesh Pandya wrote:

Kalpesh Pandya wrote:

adam kraitman wrote:

Hi Kalpesh Pandya,
It means that after changing the SElinux settings you will need to reboot your laptop

I opened the file selinux but it's a read only file. So it is not allowing me to edit SELINUX to permissive. Can you please help me out here?

Hello,

Nevermind this.

I changed the settings of selinux to permissive and ran the said commands after the reboot. Following is the output for sudo systemctl status openvpn-client@sepia:

- OpenVPN tunnel for sepia
Loaded: loaded (/usr/lib/systemd/system/openvpn-client@.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2020-04-20 12:23:14 IST; 5s ago
Docs: man:openvpn(8)
https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
https://community.openvpn.net/openvpn/wiki/HOWTO
Process: 4009 ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config sepia.conf (code=exited, status=1/FAILURE)
Main PID: 4009 (code=exited, status=1/FAILURE)
Status: "Pre-connection initialization successful"

Apr 20 12:23:10 localhost.localdomain openvpn4009: WARNING: file 'sepia/tlsauth' is group or others accessible
Apr 20 12:23:10 localhost.localdomain openvpn4009: OpenVPN 2.4.8 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Nov 1 2019
Apr 20 12:23:10 localhost.localdomain openvpn4009: library versions: OpenSSL 1.1.1d FIPS 10 Sep 2019, LZO 2.08
Apr 20 12:23:10 localhost.localdomain systemd1: Started OpenVPN tunnel for sepia.
Apr 20 12:23:10 localhost.localdomain openvpn4009: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 20 12:23:10 localhost.localdomain openvpn4009: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Apr 20 12:23:14 localhost.localdomain openvpn4009: failed to find GID for group nogroup
Apr 20 12:23:14 localhost.localdomain openvpn4009: Exiting due to fatal error
Apr 20 12:23:14 localhost.localdomain systemd1: : Main process exited, code=exited, status=1/FAILURE
Apr 20 12:23:14 localhost.localdomain systemd1: : Failed with result 'exit-code'.

Thanks,
Kalpesh Pandya

Hello adam,

Can you please help me out over here?

Thanks,
Kalpesh Pandya

Actions #18

Updated by adam kraitman about 4 years ago

Hey, Can you please paste the output of
sudo ls -l /etc/openvpn/client/sepia
i want to see the user and group permission

Actions #19

Updated by Kalpesh Pandya about 4 years ago

adam kraitman wrote:

Hey, Can you please paste the output of
sudo ls -l /etc/openvpn/client/sepia
i want to see the user and group permission

Here's the output of this:

total 20
rw-r--r-. 1 kapandya kapandya 1241 Mar 23 2015 ca.crt
rw-r--r-. 1 kapandya kapandya 273 Mar 23 2015 client.conf
rwxr-xr-x. 1 kapandya kapandya 1737 Mar 23 2015 new-client
-rw------
. 1 root root 105 Mar 6 11:04 secret
r--r----. 1 kapandya kapandya 636 Mar 23 2015 tlsauth

Actions #20

Updated by adam kraitman almost 4 years ago

Hi Kalpesh Pandya,
I suspect that maybe you ran the new-client script twice by accident
I would ask you to please run:
sudo rm -rf /etc/openvpn/*sepia* /etc/openvpn-client/*sepia*

And do the process again https://wiki.sepia.ceph.com/doku.php?id=vpnaccess
then paste here your new hashed VPN credentials

Thanks

Actions #21

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Hi Kalpesh Pandya,
I suspect that maybe you ran the new-client script twice by accident
I would ask you to please run:
sudo rm -rf /etc/openvpn/*sepia* /etc/openvpn-client/*sepia*

And do the process again https://wiki.sepia.ceph.com/doku.php?id=vpnaccess
then paste here your new hashed VPN credentials

Thanks

Hello,

I followed the steps on the given website, but while executing "sudo ./sepia/new-client kapandya@thinkpad" command I see the following error:

Traceback (most recent call last):
File "./sepia/new-client", line 57, in <module>
os.symlink(os.path.join(base, 'client.conf'), '../sepia.conf')
OSError: [Errno 17] File exists

Thanks,
Kalpesh Pandya

Actions #22

Updated by adam kraitman almost 4 years ago

Sorry i had a typo, Please run sudo rm -rf /etc/openvpn/client/*sepia*
And do the process again https://wiki.sepia.ceph.com/doku.php?id=vpnaccess
then paste here your new hashed VPN credentials

Actions #23

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Sorry i had a typo, Please run sudo rm -rf /etc/openvpn/client/*sepia*
And do the process again https://wiki.sepia.ceph.com/doku.php?id=vpnaccess
then paste here your new hashed VPN credentials

Here are the credentials:

kapandya@thinkpad g4JoonWShBhyS6fEdaHh7A 2990a987bf7afee6e3c8b5236b3dac813a57dbdce47ec63965c40b1b7bdafd67

Thanks,
Kalpesh Pandya

Actions #24

Updated by adam kraitman almost 4 years ago

Hi Kalpesh Pandya,

You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh using the private key matching the pubkey you provided.

Be sure to check out the following links for final workstation setup steps:
https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#vpn_client_access
https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess#ssh_config

Most developers choose to schedule runs from the shared teuthology VM. For information on that, see http://docs.ceph.com/teuthology/docs/intro_testers.html

Thanks.

Actions #25

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Hi Kalpesh Pandya,

You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh using the private key matching the pubkey you provided.

Be sure to check out the following links for final workstation setup steps:
https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#vpn_client_access
https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess#ssh_config

Most developers choose to schedule runs from the shared teuthology VM. For information on that, see http://docs.ceph.com/teuthology/docs/intro_testers.html

Thanks.

Hello,

I tried to run ssh but I'm still getting the following:

ssh: connect to host teuthology.front.sepia.ceph.com port 22: Connection timed out

P.S: I'm already connected to VPN.

Thanks,
Kalpesh Pandya

Actions #26

Updated by adam kraitman almost 4 years ago

Check that you can ping and telnet teuthology.front.sepia.ceph.com port 22
ping teuthology.front.sepia.ceph.com
telnet teuthology.front.sepia.ceph.com 22

Actions #27

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Check that you can ping and telnet teuthology.front.sepia.ceph.com port 22
ping teuthology.front.sepia.ceph.com
telnet teuthology.front.sepia.ceph.com 22

Hello,

ping teuthology.front.sepia.ceph.com gives me this(I terminated after sometime because it was not showing anything apart from 1st line below):

PING teuthology.front.sepia.ceph.com (172.21.0.51) 56(84) bytes of data.
^C
--- teuthology.front.sepia.ceph.com ping statistics ---
285 packets transmitted, 0 received, 100% packet loss, time 1132ms

And, telnet teuthology.front.sepia.ceph.com 22 gives:

Trying 172.21.0.51...
telnet: connect to address 172.21.0.51: Connection timed out

Thanks,
Kalpesh Pandya

Actions #28

Updated by adam kraitman almost 4 years ago

It seems that you are blocked by a firewall, it could be your local iptables that is blocking you or a firewall that is located somewhere in your network that is blocking you from reaching teuthology.front.sepia.ceph.com, Please check

Cheers

Adam

Actions #29

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

It seems that you are blocked by a firewall, it could be your local iptables that is blocking you or a firewall that is located somewhere in your network that is blocking you from reaching teuthology.front.sepia.ceph.com, Please check

Cheers

Adam

How can I check that?

Actions #30

Updated by adam kraitman almost 4 years ago

You can check this with the IT team they could help you with that

Actions #31

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

You can check this with the IT team they could help you with that

Okay, after doing this I'll get back to you.

Thanks,
Kalpesh Pandya

Actions #32

Updated by David Galloway almost 4 years ago

The error message is clearly in the OpenVPN output.

Apr 20 12:23:14 localhost.localdomain openvpn4009: failed to find GID for group nogroup

Just to clarify, the Red Hat VPN is different than the Sepia lab VPN. The Sepia VPN has nothing to do with Red Hat's network.

The fix for failed to find GID for group nogroup is in the documentation under Linux Gotchas

https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux

Actions #33

Updated by Kalpesh Pandya almost 4 years ago

David Galloway wrote:

The error message is clearly in the OpenVPN output.

[...]

Just to clarify, the Red Hat VPN is different than the Sepia lab VPN. The Sepia VPN has nothing to do with Red Hat's network.

The fix for failed to find GID for group nogroup is in the documentation under Linux Gotchas

https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux

Should I try to login again?

Actions #34

Updated by Kalpesh Pandya almost 4 years ago

Kalpesh Pandya wrote:

David Galloway wrote:

The error message is clearly in the OpenVPN output.

[...]

Just to clarify, the Red Hat VPN is different than the Sepia lab VPN. The Sepia VPN has nothing to do with Red Hat's network.

The fix for failed to find GID for group nogroup is in the documentation under Linux Gotchas

https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux

Should I try to login again?

As per https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux in the command "sed -i 's/nobody/openvpn/g' /etc/openvpn/sepia/client.conf" the path is incorrect I guess. It should be /etc/openvpn/client/sepia/client.conf

Please check for the same.

Thanks,
Kalpesh Pandya

Actions #35

Updated by Kalpesh Pandya almost 4 years ago

Kalpesh Pandya wrote:

Kalpesh Pandya wrote:

David Galloway wrote:

The error message is clearly in the OpenVPN output.

[...]

Just to clarify, the Red Hat VPN is different than the Sepia lab VPN. The Sepia VPN has nothing to do with Red Hat's network.

The fix for failed to find GID for group nogroup is in the documentation under Linux Gotchas

https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux

Should I try to login again?

As per https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#linux in the command "sed -i 's/nobody/openvpn/g' /etc/openvpn/sepia/client.conf" the path is incorrect I guess. It should be /etc/openvpn/client/sepia/client.conf

Please check for the same.

Thanks,
Kalpesh Pandya

Also, after going through https://wiki.sepia.ceph.com/doku.php?id=vpnaccess. I'm able to access ssh .

But I've forgotten the password for that. Can you help me out for this?

Sorry for the inconvenience caused.

Thanks,
Kalpesh Pandya

Actions #36

Updated by adam kraitman almost 4 years ago

I am seeing in the gateway logs that you managed to connect today

Please run the following:

sudo service openvpn restart
OR
sudo systemctl restart openvpn@sepia
OR
sudo systemctl restart openvpn-client@sepia

  1. Try all 3. One of them should work.
  2. Whichever works, and enable the systemd service

sudo systemctl enable openvpn@sepia
OR
sudo systemctl enable openvpn-client@sepia

And sudo systemctl status openvpn@sepia
OR
sudo systemctl status openvpn-client@sepia

And paste the output

Actions #37

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

I am seeing in the gateway logs that you managed to connect today

Please run the following:

sudo service openvpn restart
OR
sudo systemctl restart openvpn@sepia
OR
sudo systemctl restart openvpn-client@sepia

  1. Try all 3. One of them should work.
  2. Whichever works, and enable the systemd service

sudo systemctl enable openvpn@sepia
OR
sudo systemctl enable openvpn-client@sepia

And sudo systemctl status openvpn@sepia
OR
sudo systemctl status openvpn-client@sepia

And paste the output

Here's the output of sudo systemctl status openvpn-client@sepia:

- OpenVPN tunnel for sepia
Loaded: loaded (/usr/lib/systemd/system/openvpn-client@.service; enabled; vendor preset: disabled)
Active: active (running) since Sun 2020-05-10 19:03:17 IST; 55s ago
Docs: man:openvpn(8)
https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
https://community.openvpn.net/openvpn/wiki/HOWTO
Main PID: 409660 (openvpn)
Status: "Initialization Sequence Completed"
Tasks: 1 (limit: 4915)
Memory: 1.9M
CGroup: /system.slice/system-openvpn\
└─409660 /usr/sbin/openvpn --suppress-timestamps --nobind --config sepia.conf

May 10 19:03:20 localhost.localdomain openvpn409660: [openvpn-sepia] Peer Connection Initiated with [AF_INET]8.43.84.129:1194
May 10 19:03:22 localhost.localdomain openvpn409660: Data Channel: using negotiated cipher 'AES-256-GCM'
May 10 19:03:22 localhost.localdomain openvpn409660: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May 10 19:03:22 localhost.localdomain openvpn409660: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
May 10 19:03:22 localhost.localdomain openvpn409660: TUN/TAP device sepia0 opened
May 10 19:03:22 localhost.localdomain openvpn409660: /sbin/ip link set dev sepia0 up mtu 1500
May 10 19:03:22 localhost.localdomain openvpn409660: /sbin/ip addr add dev sepia0 local 172.21.49.130 peer 172.21.49.129
May 10 19:03:22 localhost.localdomain openvpn409660: GID set to openvpn
May 10 19:03:22 localhost.localdomain openvpn409660: UID set to openvpn
May 10 19:03:22 localhost.localdomain openvpn409660: Initialization Sequence Completed

Actions #38

Updated by adam kraitman almost 4 years ago

According to the output you are connected, you can start working in the lab

Actions #39

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

According to the output you are connected, you can start working in the lab

Yes, that's true but to login using ssh it requires a password and I've forgotten the password for that. So how can I reset this?

Thanks,
Kalpesh Pandya

Actions #40

Updated by adam kraitman almost 4 years ago

Try now, The access is with the ssh key no password is needed

Actions #41

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Try now, The access is with the ssh key no password is needed

I tried to use ssh but it asks for the following and I've forgotten the same.

's password:

Thanks,
Kalpesh Pandya

Actions #42

Updated by David Galloway almost 4 years ago

Do you still have the SSH private key matching the public key here? https://github.com/ceph/keys/blob/master/ssh/kapandya.pub

Try ssh -i ~/.ssh/id_rsa kapandya@teuthology.front.sepia.ceph.com

We don't use passwords in the lab; Just SSH keys.

Actions #43

Updated by Kalpesh Pandya almost 4 years ago

David Galloway wrote:

Do you still have the SSH private key matching the public key here? https://github.com/ceph/keys/blob/master/ssh/kapandya.pub

Try ssh -i ~/.ssh/id_rsa kapandya@teuthology.front.sepia.ceph.com

We don't use passwords in the lab; Just SSH keys.

Hello,

The ssh private key doesn't match the public key at https://github.com/ceph/keys/blob/master/ssh/kapandya.pub.

So, how can we solve this?

Thanks,
Kalpesh Pandya

Actions #44

Updated by David Galloway almost 4 years ago

Kalpesh Pandya wrote:

So, how can we solve this?

Give us the correct public key...

Actions #45

Updated by Kalpesh Pandya almost 4 years ago

David Galloway wrote:

Kalpesh Pandya wrote:

So, how can we solve this?

Give us the correct public key...

I checked id_rsa.pub and the pub key there is the same as in https://github.com/ceph/keys/blob/master/ssh/kapandya.pub

Sorry for the wrong reply. It happened because I checked id_rsa.

I'm attaching the ssh private key (provided in id_rsa file) along with this reply.

PFA.

Sorry for the inconvenience caused.

Thanks,
Kalpesh Pandya

Actions #46

Updated by Kalpesh Pandya almost 4 years ago

Kalpesh Pandya wrote:

David Galloway wrote:

Kalpesh Pandya wrote:

So, how can we solve this?

Give us the correct public key...

I checked id_rsa.pub and the pub key there is the same as in https://github.com/ceph/keys/blob/master/ssh/kapandya.pub

Sorry for the wrong reply. It happened because I checked id_rsa.

I'm attaching the ssh private key (provided in id_rsa file) along with this reply.

PFA.

Sorry for the inconvenience caused.

Thanks,
Kalpesh Pandya

Hello,

Any updates on this? Waiting for the response.

Thanks,
Kalpesh Pandya

Actions #47

Updated by adam kraitman almost 4 years ago

Hey Kalpesh Pandya,
Using the privet key run
ssh -i ~/.ssh/id_rsa

Actions #48

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Hey Kalpesh Pandya,
Using the privet key run
ssh -i ~/.ssh/id_rsa

Hey adam,

Finally it's running with the following output:

Welcome to Ubuntu 18.04.4 LTS (GNU/Linux 4.15.0-96-generic x86_64)

  • Canonical Livepatch is available for installation.
    - Reduce system reboots and improve kernel security. Activate at:
    https://ubuntu.com/livepatch

The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.

kapandya@teuthology:~$

I hope nothing is wrong in the output.

Thanks,
Kalpesh Pandya

Actions #49

Updated by adam kraitman almost 4 years ago

Good, I am glad it works

Actions #50

Updated by David Galloway almost 4 years ago

You should never share your private key for any reason.

Please erase both the private and public keys on your machine (rm -f ~/.ssh/id_rsa*), generate a new pair (ssh-keygen -t rsa) and share ONLY the public key with us.

Actions #51

Updated by Kalpesh Pandya almost 4 years ago

David Galloway wrote:

You should never share your private key for any reason.

Please erase both the private and public keys on your machine (rm -f ~/.ssh/id_rsa*), generate a new pair (ssh-keygen -t rsa) and share ONLY the public key with us.

Hello David,

Thank you so much for the information.

Here is the new public key.

PFA.

Thanks,
Kalpesh Pandya

Actions #52

Updated by adam kraitman almost 4 years ago

Hey try now i added you new key

Actions #53

Updated by Kalpesh Pandya almost 4 years ago

adam kraitman wrote:

Hey try now i added you new key

Yeah it's working fine now.

Thanks,
Kalpesh Pandya

Actions #54

Updated by adam kraitman almost 4 years ago

  • Status changed from In Progress to Resolved
Actions

Also available in: Atom PDF