Cannot ssh to the instance | Eucalyptus Community

6 replies [Last post]

Thu, 08/26/2010 - 09:43

walter jiang

Offline

Joined: 08/26/2010

I'm the first time install Eucalyptus. I had followed the steps exactly in https://help.ubuntu.com/community/UEC/CDInstall

All is Ok except the command: ssh -i ~/.euca/mykey.priv ubuntu@192.168.10.200
It comes to this error: Connecting to address 192.168.10.200 port 22: No route to host
At this point, I tried to restart eucalyptus-cc with CLEAN=1, it can be pingable and ssh to. But I got this:
*******************************************************************************************************************
~$ ssh -v -i /home/icselab/.euca/adminkey.priv ubuntu@192.168.10.200
OpenSSH_5.3p1 Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 192.168.10.200 [192.168.10.200] port 22.
debug1: Connection established.
debug1: identity file /home/admin/.euca/adminkey.priv type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3p1 Debian-3ubuntu4
debug1: match: OpenSSH_5.3p1 Debian-3ubuntu4 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
0b:17:0d:e6:31:60:ad:cc:60:82:ce:b3:ea:94:d6:55.
Please contact your system administrator.
Add correct host key in /home/admin/.ssh/known_hosts to get rid of this message.
Offending key in /home/admin/.ssh/known_hosts:1
RSA host key for 192.168.10.200 has changed and you have requested strict checking.
Host key verification failed.
***************************************************************************************************************

Then I remove /home/admin/.ssh/known_hosts , it prompt to input password. (But I don't know the image's password, I had downloaded the image from ubuntu website.)

So I cannot control the instance at all.

Please help.

Maybe I have not list all the nessary infomation. If you want to know any further infomation please ask me to do that.

Thanks a lot.

Best Regards,

-Walter

Tue, 08/31/2010 - 16:24

graziano

Offline

Joined: 01/14/2010

Hello, which images are you

Hello,

which images are you using? Is it one of our pre-packaged images? If so the user will have to be root.

cheers
graziano

Tue, 08/31/2010 - 18:34

walter jiang

Offline

Joined: 08/26/2010

Ok in SYSTEM mode, not work in MANAGED and MANAGED-NOVLAN mode

Thanks for your kind reply. Yes, I used Eucalyptus-certified image euca-ubuntu-9.04-i386.tar.gz. I have tried both ubuntu@ip and root@ip, the same result as above mentioned.

As my further trial, I found it can work when I changed the mode to SYSTEM. But at this mode, the front-end cannot realize the ip outside dhcp assigned automatically. Since this defect exists, I want to configure it in MANAGED or MANAGED-NOVLAN mode.

The network configuration in my scenario is: two servers (one for front-end and the other for noe) connect to enterprise LAN network directly, where a dhcp server exists. two servers both only one NIC.

Can you help explain how to configure MANAGED and MANAGED-NOVLAN mode in my scenario? I have read all the online documentation and modify configuration as documentation says, it also cannot work in these two mode.

Many thanks.

Best Regards.
-walter

Tue, 08/31/2010 - 21:22

krishna_iyer

Offline

Joined: 07/24/2010

Been there

I had this exact problem and for some reason this is not properly documented.
My two cents: IMHO, The networking, login and storage/vm instance mgt needs a lot of detailed notes other than presently available.

I got the solution from this link https://geni-orca.renci.org/trac/wiki/Eucalyptus-1.5.2-Setup

Try this
[HN] Setup passwordless login for users 'root' and 'eucalyptus' from head node to compute nodes.
Login as root
# ssh-keygen
# cd /root/.ssh
# cp id_rsa.pub authorized_keys
# scp authorized_keys root@compute-node.name.or.ip:/root/.ssh/
# su - eucalyptus
$ ssh-keygen
$ cp id_rsa.pub authorized_keys
$ scp authorized_keys root@compute-node.name.or.ip:/var/lib/eucalyptus/.ssh/
$ exit

And Then use root user to login to the instance.

Fri, 09/03/2010 - 22:02

graziano

Offline

Joined: 01/14/2010

Hello, we are suspecting some

Hello,

we are suspecting some issues with the particular image we have and UEC. Does this happen with our others images (that is not ubuntu images)? Of course without using SYSTEM mode? We are suspecting some race conditions during the boot process which happens only with UEC and that specific Ubuntu image, but we'd like to have confirmation about it.

cheers
graziano

Thu, 10/28/2010 - 20:38

girishlc

Offline

Joined: 10/21/2010

enable ssh

To enable ssh,
After installation first thing you have to do is;
$sudo apt-get update
$sudo apt-get upgrade
$sudo apt-get install openssh-server

Then you can do ssh from any other m/c in the nw.

-Girish.L.C

Wed, 03/16/2011 - 05:07

okhalid

Offline

Joined: 02/24/2011

Unable to SSH in to Fedora/CentOS/Debian Images as well

Hi Graziano,

I am having the same problem that I can't SSH into the pre-prepared eucalyptus images. I tried with all of them, and SSH keeps on prompting for password.

I tried the following way:
ssh -i /path/to/admin.private.key root@ip.address