Rundeck Rundeck Development

Comments and changes to this ticket

• 

  Alex-SF July 9th, 2011 @ 01:43 PM

  • Tag set to “ssh”

  Hi Adish,

  Take a look at the value for the "framework.ssh.keypath" value found in framework.properties. This defines the identity used by Rundeck. Change it to the correct path.

  Try SSH'ing directly using that value:

  ssh -i $(awk '/framework.ssh.keypath = / {print $3}' $RDECK_BASE/etc/framework.properties) USER@REMOTEHOST
  

  If you installed via RPM, use /etc/rundeck/framework.properties.

• You flagged this item as spam.
  

  Shawn Kielty December 20th, 2012 @ 11:59 AM

  Actually -- I tried this and it works ... I am wondering if anyone has any ideas how to fix.

  I still don't connect via ssh from rundeck.

  ssh -i $(awk '/framework.ssh.keypath = / {print $3}' ./framework.properties) user@remotehost
  Last login: Thu Dec 20 18:34:01 2012 from

  remotehosthost ~

  When it runs I get the output below, but I don't see any indication that it's connecting as "sshuser" defined in framework.ssh.user in the framework.propeties file

  I see this in the /var/log/secure on the host: Dec 20 19:49:13 remotehostname sshd[25139]: Received disconnect from 10.80.8.18: 3: com.jcraft.jsch.JSchException: Auth cancel

  Rundeck output:

  [workflow] Begin execution: rundeck-workflow-node-first

  07:27:34    preparing for sequential execution on 1 nodes
  07:27:34    Executing command on node: remoteHost, NodeEntryImpl{tags=[packages::defaults, settings, vas, deploy, ntp::install, sysstat, ntp, timezone, repos::puppetlabsint, selfcert, facts, appdynamics::agent, ntp::config, sendmail, removefiles, splunk::forwarder, rmxsigo, sendmail::config, nfs, sendmail::install, nfs::reg, mcollective::params, securepropskeystore, sendmail::service, logrotate, default, nfs::utl, fglam, base, ntp::service, mcollective::agent, nfs::home], attributes={tags=appdynamics::agent, base, default, deploy, facts, fglam, logrotate, mcollective::agent, mcollective::params, nfs, nfs::home, nfs::reg, nfs::utl, ntp, ntp::config, ntp::install, ntp::service, packages::defaults, removefiles, repos::puppetlabsint, rmxsigo, securepropskeystore, selfcert, sendmail, sendmail::config, sendmail::install, sendmail::service, settings, splunk::forwarder, sysstat, timezone, vas, osFamily=, username=root, osVersion=2.6.18-194.el5, osArch=x86_64, description= 5.5, hostname=remoteHost, nodename=remoteHost, osName=Linux}, project='null'}
  07:27:34    NodeSet: SingleNodeSelector{nodename='remoteHost'}
  07:27:34    Workflow: com.dtolabs.rundeck.core.execution.workflow.StepFirstWorkflowStrategy$stepFirstWrapper@d828bcff
  07:27:34    data context: {job={id=d8245d86-20ad-4df0-bc0b-7bebed615c2c, project=default, username=shawn, name=test, group=Test, execid=459}, option={}}
  07:27:34    [workflow] Begin step: 1,exec
  07:27:34    1: com.dtolabs.rundeck.execution.ExecutionItemFactory$4@6e653068
  07:27:34    ExecutionItem created, executing: com.dtolabs.rundeck.execution.ExecutionItemFactory$4@6e653068
  07:28:45    preparing for sequential execution on 1 nodes
  07:28:45    Executing command on node: remoteHost, NodeEntryImpl{tags=[packages::defaults, settings, vas, deploy, ntp::install, sysstat, ntp, timezone, repos::puppetlabsint, selfcert, facts, appdynamics::agent, ntp::config, sendmail, removefiles, splunk::forwarder, rmxsigo, sendmail::config, nfs, sendmail::install, nfs::reg, mcollective::params, securepropskeystore, sendmail::service, logrotate, default, nfs::utl, fglam, base, ntp::service, mcollective::agent, nfs::home], attributes={tags=appdynamics::agent, base, default, deploy, facts, fglam, logrotate, mcollective::agent, mcollective::params, nfs, nfs::home, nfs::reg, nfs::utl, ntp, ntp::config, ntp::install, ntp::service, packages::defaults, removefiles, repos::puppetlabsint, rmxsigo, securepropskeystore, selfcert, sendmail, sendmail::config, sendmail::install, sendmail::service, settings, splunk::forwarder, sysstat, timezone, vas, osFamily=, username=root, osVersion=2.6.18-194.el5, osArch=x86_64, description= 5.5, hostname=remoteHost, nodename=remoteHost, osName=Linux}, project='null'}
  07:28:45    beginInterpretCommand(remoteHost): exec: com.dtolabs.rundeck.execution.ExecutionItemFactory$4@6e653068
  07:28:45    Using ssh keyfile: /home/rundeck/.ssh/id_rsa
  07:28:45    Starting SSH Connection: root@remoteHost (remoteHost)
  07:28:45    Set timeout to 30000
  07:28:45    Connecting to remoteHost:22
  07:28:45    Connecting to remoteHost port 22
  07:28:45    Connection established
  07:28:45    Remote version string: SSH-2.0-OpenSSH_4.3
  07:28:45    Local version string: SSH-2.0-JSCH-0.1.45
  07:28:45    CheckCiphers: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-ctr,arcfour,arcfour128,arcfour256
  07:28:45    CheckKexes: diffie-hellman-group14-sha1
  07:28:45    diffie-hellman-group14-sha1 is not available.
  07:28:45    SSH_MSG_KEXINIT sent
  07:28:45    SSH_MSG_KEXINIT received
  07:28:45    kex: server->client aes128-ctr hmac-md5 none
  07:28:45    kex: client->server aes128-ctr hmac-md5 none
  07:28:45    SSH_MSG_KEXDH_INIT sent
  07:28:45    expecting SSH_MSG_KEXDH_REPLY
  07:28:45    ssh_rsa_verify: signature true
  07:28:45    Permanently added 'remoteHost' (RSA) to the list of known hosts.
  07:28:45    SSH_MSG_NEWKEYS sent
  07:28:45    SSH_MSG_NEWKEYS received
  07:28:45    SSH_MSG_SERVICE_REQUEST sent
  07:28:45    SSH_MSG_SERVICE_ACCEPT received
  07:28:45    Authentications that can continue: gssapi-with-mic,publickey,keyboard-interactive,password
  07:28:45    Next authentication method: gssapi-with-mic
  07:28:45    Authentications that can continue: publickey,keyboard-interactive,password
  07:28:45    Next authentication method: publickey
  07:28:45    Authentications that can continue: password
  07:28:45    Next authentication method: password
  07:28:45    Disconnecting from remoteHost port 22
  07:28:45    Adding reference: ant.PropertyHelper
  07:28:45    Setting project property: sshexec.output ->
  

  SEVERE 07:28:45 Authentication failure connecting to node: "remoteHost". Make sure your resource definitions and credentials are up to date.

  07:28:45    finishInterpretCommand(remoteHost): exec: [jsch-ssh] result was failure, resultcode: -1: Authentication failure connecting to node: "remoteHost". Make sure your resource definitions and credentials are up to date.
  

• 

  Greg Schueler December 20th, 2012 @ 04:16 PM

  Hi Shawn,

  (btw, we are not using Lighthouse for bugs anymore, but github issues. This sounds like a troubleshooting question maybe better suited to the rundeck mailing list if you want to send it there.)

  It looks like you are connecting as "root":

  Starting SSH Connection: root@remoteHost (remoteHost)

  Double check the Node definition for the username attribute