[ovirt-users] Re: sshd_config AuthorizedKeysFile
What happens when you change the default, but also add a "Match" directive
overriding that option for the engine ?
Best Regards,
Strahil Nikolov
В четвъртък, 12 ноември 2020 г., 10:01:12 Гринуич+2, Angus Clarke
<angus(a)charworth.com> написа:
Hello
Sharing for anyone who needs it, this was carried out on OL7, they use ovirt 4.3
In short: both the hosted-engine deployment routine and the host add to cluster routine
distribute public ssh keys to /root/.ssh/authorized_keys regardless of the
AuthorizedKeysFile setting in /etc/ssh/sshd_config. Both routines fail if
AuthorizedKeysfile is not default.
The hosted-engine setup assumes AuthorizedKeysFile to be default (~/.ssh/authorized_keys)
and creates a public key there, instead of following the sshd_config directive. The setup
fails on the back of this. Once I commented this out of sshd_config file (assumes default)
and restarted sshd on the KVM host that was running the hosted-engine deployment, the
hosted-engine setup completed successfully. Similarly, I could not deploy a second KVM
host to the compute cluster until I had altered this setting on that 2nd KVM host -
presumably that process has some similar routine that unwittingly writes keys to
~/.ssh/authorized_keys.HTH
Angus
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UMJ4Y622RAL...