PDA

View Full Version : ssh between appliances?


kapow
01-14-2008, 05:06 PM
I've searched the forums over and over for the last hour, but can't find an answer to this.

I can ssh into my appliances just fine (app based on LAMP template). However, I'd like to ssh from one appliance to another. However, I get Permission denied (publickey) errors when I do this.

I attempted to do a ssh -i ~/.ssh/authorized_keys, but it asks for a pass phrase. What am I missing?

Thanks

JosephD
01-14-2008, 07:35 PM
Kapow,

When you attempt to ssh into an appliance the only key it has is the grids key, and every time the appliance starts the root key file is written over again to maintain security of the grid...

There are a few ways to work around this.

These all assume that you have branched the class, or are working on your own created appliance.

1: You can set the Linux instance to allow password authentication through ssh (less secure)

2: You can set up a script on boot to add Your ssh key to the file once it boots up.

3: You can configure another user on the Linux instance, and log in as that user with it's key added.

Also ensure that your ssh client supports, and is configured for key forwarding.

This should give you the results you desire.

Let me know if it doesn't, or if you need any assistance in accomplishing any of these.

Joseph
3tera

kapow
01-14-2008, 08:25 PM
Got it. Thanks.

jonesy
01-15-2008, 05:06 PM
kapow,

Did this work for you? I've actually never seen the use of the authorized_keys file as a valid identity used with an ssh client using the '-i' flag. '-i' would normally be used to point at your *local* copy of a private key, where that private key's public counterpart's text has been copied into the authorized_keys file on the *remote* system.

....Of course, it's possible that you've stored your local public key in a file called authorized_keys.

kapow
01-15-2008, 05:07 PM
Honestly, I haven't it tried it yet and not sure I really need to do it.