Cant Access ‘classifier’ node in Slice

[Sourya Saha]

Hi. I cannot access the node named ‘classifier’ at STAR with ip 2001:400:a100:3030:f816:3eff:fe32:1bbd.
This is what i get:

jammy@dissect-Precision-3680:~$ ssh -F ~/.ssh/fabric_ssh_config/fabric_config -i ~/.ssh/fabric_ssh_config/slice_key ubuntu@2001:400:a100:3030:f816:3eff:fe32:1bbd
Warning: Permanently added ‘bastion.fabric-testbed.net’ (ED25519) to the list of known hosts.
Warning: Permanently added ‘2001:400:a100:3030:f816:3eff:fe32:1bbd’ (ED25519) to the list of known hosts.
ubuntu@2001:400:a100:3030:f816:3eff:fe32:1bbd: Permission denied (publickey).

I have logged into the VM using my local machine and one of the terminals are open with that VM. However, I cannot login anymore to that VM from anywhere (local machine/JupyterHub). I tried checking the authorized_keys in the VM and it matches the required private key. But I am unable to login. My Slice_ID is 91d9b871-e169-443c-869b-a9fd1df54a87.

[Komal Thareja]

Hi Sourya,

It looks like the authorized_keys file is not correct. I am not even able to login to nova SSH keys.

Could you please confirm if you see a key which ends with Generated-by-Nova  in /home/ubuntu/.ssh/authorized_keys ?

Also, please share the output of the command ls -ltr /home/ubuntu/.ssh/ ?

Thanks,

Komal

[Sourya Saha]

Hi Komal, I do see a key ending with ‘Generated-by-Nova’ in the list of authorized keys.
The output of ls -ltr /home/ubuntu/.ssh/ is:

ubuntu@00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier:~$ ls -ltr /home/ubuntu/.ssh/
total 4
-rw——- 1 ubuntu ubuntu 742 Dec 2 17:41 authorized_keys
ubuntu@00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier:~$

[Hussam Nasir]

One likely cause is if the disk is full. Please check that too.

[Sourya Saha]

Hi. Just checked the disk. It says it is 88% available.

[Hussam Nasir]

Can you please grab the logs using

sudo journalctl -r -u ssh >/tmp/ssh.log

 

and then email help@fabric-testbed.net with the ssh.log file attached .If pullout the file is not possible then just run

sudo journalctl -r -u ssh

and copy the few recent lines that will help us debug the issue.

[Sourya Saha]

Sent. Please check and confirm.

[Hussam Nasir]

Can you please post the output of
ls -lad /home/ubuntu

ls -la /home/ubuntu/.ssh

 

The can see from the ssh log that the ownership of home directory is the issue

Dec 02 18:07:16 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier sshd[60744]: Connection closed by authenticating user ubuntu 2001:400:a100:1030::51 port 52118 [preauth]
Dec 02 18:07:16 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier sshd[60744]: Authentication refused: bad ownership or modes for directory /home/ubuntu
Dec 02 18:07:09 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier sshd[60742]: Connection closed by authenticating user ubuntu 2001:400:a100:1030::51 port 52104 [preauth]
Dec 02 18:07:09 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier sshd[60742]: Authentication refused: bad ownership or modes for directory /home/ubuntu
Dec 02 18:06:35 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier sshd[60740]: Connection closed by authenticating user ubuntu 2001:400:a100:1030::51 port 50056 [preauth]
Dec 02 18:06:35 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier sshd[60740]: Authentication refused: bad ownership or modes for directory /home/ubuntu

[Sourya Saha]

ubuntu@00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier:~$ ls -lad /home/ubuntu
drwxrwx— 12 ubuntu root 4096 Dec 2 18:17 /home/ubuntu
ubuntu@00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier:~$ ls -la /home/ubuntu/.ssh
total 12
drwx—— 2 ubuntu ubuntu 4096 Dec 2 17:58 .
drwxrwx— 12 ubuntu root 4096 Dec 2 18:17 ..
-rw——- 1 ubuntu ubuntu 742 Dec 2 17:41 authorized_keys
ubuntu@00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier:~$

 

 

• This reply was modified 2 weeks, 5 days ago by Sourya Saha.

[Hussam Nasir]

Thats not the right machine . We want the output from 00954b21-57cf-40e2-86c2-0d7b7269fecb-classifier  node

[Sourya Saha]

Sorry, just edited my comment.

[Hussam Nasir]

Aha. The cuplrit is the group ownsership on your home folder. This must have been changed somehow.

drwxrwx— 12 ubuntu root 4096 Dec 2 18:17 /home/ubuntu

 

run the command

sudo chown -R ubuntu:ubuntu  /home/ubuntu

 

That should fix the issue.

 

[Sourya Saha]

Fixed it like a charm. Thank you so much.

[Hussam Nasir]

glad to be of assistance

[Author]

Posts