[Capistrano] Re: SSH public key/Automatic or passwordless login

[Jamis Buck]

Yeah. If you want to avoid a password prompt, you need to make sure _all_ of the servers you are connecting to are configured for passwordless authentication.

- Jamis

On Apr 29, 2008, at 4:06 PM, Chuck wrote:

One of the machines I'm deploying to is the machine I'm deploying
from. I set up the public/private key to get me into the other two
machines, but when I ssh to the local machine, it prompts me for a
password. Could that be causing the problem?

On Apr 29, 3:36 pm, Chuck <[EMAIL PROTECTED]> wrote:

ok, test_without_sudo prompted for a password, so it looks like it's

public key.

On Apr 29, 3:26 pm, Jamis Buck <[EMAIL PROTECTED]> wrote:

trying to authenticate to the server with a password instead of with a

Have you verified that sudo is configured right? For instance, add the

following two tasks and see if both work without password prompts:

  task :test_without_sudo do
    run "whoami"
  end

  task :test_with_sudo do
    run "sudo whoami"
    # I would generally recommend the following for sudo use:
    #   sudo "whoami"

  end

# but you've got some complex commands that won't play nice with it

If :test_without_sudo throws up a prompt, then you know it's unrelated

to sudo is more likely connection-related. If :test_without_sudo
doesn't prompt, but :test_with_sudo does, then you've not configured
sudo correctly. If both execute without a prompt,
but :umount_nfs_shares still does, then something else is wrong. :(

- Jamis

On Apr 29, 2008, at 3:05 PM, Chuck wrote:

task :umount_nfs_shares do

d ':' -f

| grep us
er | cut -d ' ' -f 3`; fi"

d ':' -f

| grep co
ntact | cut -d ' ' -f 3`; fi"

d ':' -f
2` = #{internal_db} ]; then sudo chown -R sms:mongrel /public; fi"
run "sudo chown -R user:group /var/www/blackbookmobile/"
run "sudo chmod -R g+w /var/www/blackbookmobile/"
end

run "if [ `/sbin/ifconfig eth0 | grep inet | cut -d ' ' -f 12 | cut - 2` != #{internal_db} ]; then sudo umount `mount | grep blackbookmobile run "if [ `/sbin/ifconfig eth0 | grep inet | cut -d ' ' -f 12 | cut - 2` != #{internal_db} ]; then sudo umount `mount | grep blackbookmobile run "if [ `/sbin/ifconfig eth0 | grep inet | cut -d ' ' -f 12 | cut -

- Chuck

On Apr 29, 2:56 pm, Jamis Buck <[EMAIL PROTECTED]> wrote:

Any chance you could share the definition of the "umount_nfs_shares"

task?

- Jamis

On Apr 29, 2008, at 2:16 PM, Chuck wrote:

Yes, but I've configured the group I'm a member of so that it
doesn't
require a password when I use sudo with a "NOPASSWD: ALL".

On Apr 29, 8:57 am, Jamis Buck <[EMAIL PROTECTED]> wrote:

Is anything trying to execute via sudo?

- Jamis

On Apr 29, 2008, at 8:37 AM, Chuck wrote:

I was going to set up a cron job (under my own crontab, so it'd

be
running as my user).

Here's what I get when I attempt to deploy: (cap staging deploy)

* executing `staging'
triggering start callbacks for `deploy'
* executing `multistage:ensure'
triggering before callbacks for `deploy'
* executing `umount_nfs_shares'
* executing "umount command that's the first thing under
umount_nfs_shares"
servers: ["X.X.X.X", "X.X.X.X", "X.X.X.X"]
Password:

I didn't put a password on the SSH certificate, so I'm certain
that's
not it.

Thanks,
Chuck

On Apr 28, 4:37 pm, Jamis Buck <[EMAIL PROTECTED]> wrote:

How is your deployment script being run automatically? Is it
being
run

is
not
the same as the password?)

as you, or a different user? When does it prompt for a password? (Might it be prompting for an SSH certificate passphrase, which

- Jamis

On Apr 28, 2008, at 3:55 PM, Chuck wrote:

I'm trying to set up a deployment script that will run on a
regular
basis, but it continuously prompts me for a password.

I set up a public/private key and can now log into the machines

i'm

cannot

password prompt.

deploying to from my deployment machine without a password, but for the life of me figure out how to get capistrano to drop the

Any ideas/input?

smime.p7s
3KDownload

smime.p7s
3KDownload

smime.p7s
3KDownload

smime.p7s
3KDownload

--~--~---------~--~----~------------~-------~--~----~
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/capistrano
-~----------~----~----~----~------~----~------~--~---

smime.p7s
Description: S/MIME cryptographic signature