Infrastructure » sepia

Hey soumyakoduri, Are these new/additional or replacement credentials?

adam kraitman wrote:

Hey soumyakoduri, Are these new/additional or replacement credentials?

Hi Adam,

These are additional credentials.

Hey Soumya Koduri,

You should have access to the Sepia lab now. Please verify you're able to connect to the vpn and ssh soumyakoduri@teuthology.front.sepia.ceph.com using the private key matching the pubkey you provided.

Be sure to check out the following links for final workstation setup steps:
https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#vpn_client_access
https://wiki.sepia.ceph.com/doku.php?id=testnodeaccess#ssh_config

Most developers choose to schedule runs from the shared teuthology VM. For information on that, see http://docs.ceph.com/teuthology/docs/intro_testers.html

If you plan on scheduling tests, one of the options you'll need to set with teuthology-suite is -p, --priority. Please refrain from using a priority lower than 101 (lower number = higher priority). When a high priority is used, it locks up too many testnodes at once and prevents other developers from testing changes.

Thanks.

Hi Adam,

I still get AUTH_FAILED error.

skoduri:~$ systemctl status openvpn-client@sepia.service
○ openvpn-client@sepia.service - OpenVPN tunnel for sepia
Loaded: loaded (/usr/lib/systemd/system/openvpn-client@.service; enabled; preset: disabled)
Drop-In: /usr/lib/systemd/system/service.d
└─10-timeout-abort.conf
Active: inactive (dead) since Fri 2024-04-05 19:12:48 IST; 29min ago
Duration: 3.832s
Docs: man:openvpn(8)
https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
https://community.openvpn.net/openvpn/wiki/HOWTO
Process: 17115 ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config sepia.conf (code=exited, status=0/SUCCESS)
Main PID: 17115 (code=exited, status=0/SUCCESS)
Status: "Pre-connection initialization successful"
CPU: 30ms

Apr 05 19:12:46 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Apr 05 19:12:46 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: VERIFY OK: depth=1, O=Redhat, CN=openvpnca-sepia
Apr 05 19:12:46 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: VERIFY KU OK
Apr 05 19:12:46 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: Validating certificate extended key usage
Apr 05 19:12:46 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: NOTE: --mute triggered...
Apr 05 19:12:47 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: 4 variation(s) on previous 10 message(s) suppressed by --mute
Apr 05 19:12:47 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: [openvpn-sepia] Peer Connection Initiated with [AF_INET]8.43.84.129:1194
Apr 05 19:12:48 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: AUTH: Received control message: AUTH_FAILED
Apr 05 19:12:48 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com openvpn¹⁷¹¹⁵: SIGTERM[soft,auth-failure] received, process exiting
Apr 05 19:12:48 li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com systemd¹: openvpn-client@sepia.service: Deactivated successfully.

Even unable to connect to sepia VPN. I followed instructions outlined in https://wiki.sepia.ceph.com/doku.php?id=vpnaccess#vpn_client_access. But it keeps throwing password prompt saying invalid (I copied from second line of /etc/openvpn/client/sepia/secret file as mentioned in the wiki.

Please let me know how I can troubleshoot this error.

Hey If you re-run the new-client script, It's unfortunately not idempotent so if you re-ran it and still have the output, we'll need the new string it printed. If you don't have the output, please re-run it again and send the new string.

adam kraitman wrote in #note-6:

Hey If you re-run the new-client script, It's unfortunately not idempotent so if you re-ran it and still have the output, we'll need the new string it printed. If you don't have the output, please re-run it again and send the new string.

I hadn't re-run new-client script. But anyways to start afresh I ran it again now with the actual hostname set on my laptop -

skoduri@li-1542d04c-27dd-11b2-a85c-e8459f08bc94.ibm.com r+FHs1JrSRsu8eEX60Zcrw fb70b70df927608fdd585fd65672986aac2e9c8588f4f6ea42766ac268717be7
<<<<

please let me know once access is granted.

Hi Adam,

Please update if these new creds have been granted access. Thanks!