On Fri, 28 Feb 2003, Benoit des Ligneris wrote:
> I've got the error I corrected before :
> /etc/init.d/sshd start
> Starting sshd: /etc/ssh/sshd_condig: line 83: Bad configuration option:
> UserPriovilegeSeparation /etc/ssh/sshd_config: terminating, 1 bad
> configuration option. [FAILED]
The /etc/ssh/sshd_config files on my MDK 8.2 installs have the same
version of openssh as Ben (3.1p1-1mdk), but do not contain this
UserPriviledgeSeparation option. Hence, they do not fail.
My oscarinstall.log is attached, as is the sshd_config (same on head node
and clients).
So why does this happen for Ben and not for Jason/me?
--
{+} Jeff Squyres
{+} [EMAIL PROTECTED]
{+} http://www.lam-mpi.org/
=============================================================================
== Running OSCAR install_cluster script
=============================================================================
--> OSCAR version: 2.2b6
--> Command line invocation: ./install_cluster eth0
--> Hostname: queegvm
--> Domainname: oscar.vmware
--> Network interface: eth0
--> Linux distribution: Mandrake 8.2
--> Kernel version: 2.4.18-6mdk
--> Architecture: i686
--> Running in directory: /root/oscar-2.2b6
--> PATH:
/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/bin:/usr/local/sbin:/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/local/sbin
--> Running: "./wizard_prep eth0"
=============================================================================
== Running OSCAR wizard_prep script
=============================================================================
--> Running OSCAR wizard prerequisites
--> Checking to see if we need to install HTML::Tree
--> HTML::Tree appears to be installed already
--> Checking to see if we need to install XML::Parser
--> XML::Parser appears to be installed already
--> Checking to see if we need to install XML::Simple
--> XML::Simple appears to be installed already
--> Checking to see if we need to install ODA RPMs
[OSCAR::PackageBest :: Line 302] Reading package directory
[OSCAR::PackageBest :: Line 314] Reading cache file.
[OSCAR::PackageBest :: Line 327] Comparing cache to directory.
[OSCAR::PackageBest :: Line 352] Writing new cache file.
--> Installing ODA RPMs
--> Finding available packages
--> Found packages: autoupdate, c3, disable-services, hdf5, kernel_picker, lam,
loghost, mpich, networking, ntpconfig, oda, opium, pbs, pfilter, pvm, sis, switcher
--> Running package setup scripts
--> About to run /root/oscar-2.2b6/packages/disable-services/scripts/setup for
disable-services
Created: /root/oscar-2.2b6/packages/disable-services/scripts/post_client_rpm_install
--> About to run /root/oscar-2.2b6/packages/hdf5/scripts/setup for hdf5
HDF5 will be installed
--> About to run /root/oscar-2.2b6/packages/switcher/scripts/setup for switcher
--> Successfully ran package setup scripts
Checking if the mysql database server is running ... LC_ALL=EN;/etc/init.d/mysql
statusrunning.
Checking for existance of the OSCAR database ...
... OSCAR database exists.
Checking if database table <oda_shortcuts> exists ... exists.
Checking if all required fields are in table <oda_shortcuts> ...
Checking for required field named <expansion> ... exists
Checking for required field named <shortcut> ... exists
Checking for existing oda shortcut <packages> in database <oda_shortcuts> ... found
with the same expansion
Checking for existing oda shortcut <packages_that_require> in database <oda_shortcuts>
... found with the same expansion
Checking for existing oda shortcut <switcher_list_packages_tags_names> in database
<oda_shortcuts> ... found with the same expansion
Checking for existing oda shortcut <switcher_packages_that_provide> in database
<oda_shortcuts> ... found with the same expansion
Checking for existing oda shortcut <switcher_this_package_provides> in database
<oda_shortcuts> ... found with the same expansion
Checking for existing oda shortcut <this_package_requires> in database <oda_shortcuts>
... found with the same expansion
Checking if database table <package_switcher> exists ... exists.
Checking if all required fields are in table <package_switcher> ...
Checking for required field named <name> ... exists
Checking for required field named <package> ... exists
Checking for required field named <tag> ... exists
Checking if database table <packages> exists ... exists.
Checking if all required fields are in table <packages> ...
Checking for required field named <class> ... exists
Checking for required field named <copyright> ... exists
Checking for required field named <description> ... exists
Checking for required field named <group> ... exists
Checking for required field named <installable> ... exists
Checking for required field named <license> ... exists
Checking for required field named <maintainer_email> ... exists
Checking for required field named <maintainer_name> ... exists
Checking for required field named <name> ... exists
Checking for required field named <packager_email> ... exists
Checking for required field named <packager_name> ... exists
Checking for required field named <require_name> ... exists
Checking for required field named <require_type> ... exists
Checking for required field named <summary> ... exists
Checking for required field named <url> ... exists
Checking for required field named <vendor> ... exists
Checking for required field named <version_epoch> ... exists
Checking for required field named <version_major> ... exists
Checking for required field named <version_minor> ... exists
Checking for required field named <version_release> ... exists
Checking for required field named <version_subversion> ... exists
Checking for existing package record <autoupdate> in database <package> ...found
Checking for existing package record <c3> in database <package> ...found
Checking for existing package record <disable-services> in database <package> ... no
record
Writing new packages record <disable-services> in table <packages> ...
Checking for existing package record <hdf5> in database <package> ...found
Checking for existing package record <kernel_picker> in database <package> ...found
Checking for existing package record <lam> in database <package> ... no record
Writing new packages record <lam> in table <packages> ...
Checking for existing package record <loghost> in database <package> ...found
Checking for existing package record <mpich> in database <package> ...found
Checking for existing package record <networking> in database <package> ...found
Checking for existing package record <ntpconfig> in database <package> ...found
Checking for existing package record <oda> in database <package> ...found
Checking for existing package record <opium> in database <package> ...found
Checking for existing package record <pbs> in database <package> ...found
Checking for existing package record <pfilter> in database <package> ...found
Checking for existing package record <pvm> in database <package> ...found
Checking for existing package record <sis> in database <package> ...found
Checking for/root/oscar-2.2b6/scripts/package_config_xmls_to_database: package <oda>
did not supply enough (or any)
specified field names with a construct like this:
<oscar>
<fieldnames> NAMES</fieldnames>
</oscar>
config.xml construct, not storing the data in the
package/oda/shortcut having data ( packages read_records|modify_records packages
package %+ , packages_that_require read_records packages_requires package package=%1 ,
this_package_requires read_records packages_requires package package=%1 )
/root/oscar-2.2b6/scripts/package_config_xmls_to_database: package <switcher> did not
supply enough (or any)
specified field names with a construct like this:
<oscar>
<fieldnames> NAMES</fieldnames>
</oscar>
config.xml construct, not storing the data in the
package/oda/shortcut having data ( switcher_packages_that_provide read_records
package_switcher package tag=%1, switcher_this_package_provides read_records
package_switcher tag package=%1 , switcher_list_packages_tags_names read_records
package_switcher package tag name)
existing package record <switcher> in database <package> ... no record
Writing new packages record <switcher> in table <packages> ...
Checking if database table <packages_package> exists ... exists.
Checking if all required fields are in table <packages_package> ...
Checking for required field named <package> ... exists
Checking if database table <packages_provides> exists ... exists.
Checking if all required fields are in table <packages_provides> ...
Checking for required field named <name> ... exists
Checking for required field named <package> ... exists
Checking for required field named <type> ... exists
Checking if database table <packages_requires> exists ... exists.
Checking if all required fields are in table <packages_requires> ...
Checking for required field named <name> ... exists
Checking for required field named <package> ... exists
Checking for required field named <type> ... exists
Checking if database table <packages_rpmlist> exists ... exists.
Checking if all required fields are in table <packages_rpmlist> ...
Checking for required field named <package> ... exists
Checking for required field named <rpm> ... exists
Checking for required field named <scope> ... exists
--> Copying RPMs to /tftpboot/rpm
--> Copying RPMs from /root/oscar-2.2b6/packages to /tftpboot/rpm
--> Successfully copied RPMs from /root/oscar-2.2b6/packages to /tftpboot/rpm
--> Identified core packages: sis switcher c3 oda
--> Returning server RPMs for sis: systemconfigurator systemimager-common
perl-AppConfig systeminstaller systeminstaller-x11 perl-Tk perl-MLDBM syslinux
systemimager-server systemimager-i386boot-standard systemimager-ia64boot-standard
rsync tftp-hpa perl-XML-Simple perl-XML-Parser
--> Returning server RPMs for switcher: env-switcher modules-oscar
--> Returning server RPMs for c3: rsync c3 c3-profiled
--> Returning server RPMs for oda: MySQL-client libmysql10 perl-Mysql perl-DBI
perl-CGI perl-ExtUtils-PerlPP oda MySQL
[OSCAR::PackageBest :: Line 302] Reading package directory
[OSCAR::PackageBest :: Line 314] Reading cache file.
[OSCAR::PackageBest :: Line 327] Comparing cache to directory.
[OSCAR::PackageBest :: Line 352] Writing new cache file.
--> Installing server core RPMs
--> Successfully installed server core RPMs
--> Running post_server_install scripts for server core packages
Stopping rsync daemon for systemimager: rsync.
Starting rsync daemon for systemimager: rsync.
--> Successfully ran server core package post_server_install scripts
--> Successfully ran OSCAR wizard_prep script
--> Successfully ran wizard_prep
--> Running: "./oscar_wizard eth0"
=============================================================================
== Running step 6 of the OSCAR wizard: Setup networking
=============================================================================
--> Step 6: Killed background ping
--> Step 6: Launching background ping
WARNING: pinging broadcast address
--> Step 6: Launching background ping
--> Step 6: Starting to listen to network: /usr/sbin/tcpdump -i eth0 -n -e -l
tcpdump: listening on eth0
--> Step 6: Assigned 00:50:56:5b:81:38 to oscarnode1
--> Step 6: Assigned 00:50:56:5b:81:18 to oscarnode2
--> Step 6: cleaning hostfile
About to run setup_dhcpd at /usr/lib/perl5/site_perl/5.6.1/i386-linux/Tk.pm line 228
--> Step 6: Running command: mkdhcpconf -o /etc/dhcpd.conf --interface=eth0
--bootfile=pxelinux.0 --gateway=192.168.15.133
--> Step 6: Successfully ran command
--> Step 6: Restarting dhcpd service
Shutting down dhcpd: [65G[[1;31mFAILED[0;39m]
Starting dhcpd: [65G[[1;32m OK [0;39m]
--> Step 6: Successfully restarted dhcpd service
Attempting to kill 9018
--> Step 6: Killed background ping
--> Step 6: Stopped listening to network
--> Step 6: Completed successfully
--> Step 6: Killed background ping
=============================================================================
== Running step 7 of the OSCAR wizard: Complete cluster setup
=============================================================================
--> Step 7: Running: ./post_install
Gathering processor count from oscarnode1.oscar.vmware.
Warning: Permanently added 'oscarnode1.oscar.vmware,192.168.15.10' (RSA) to the list
of known hosts.
/usr/X11R6/bin/xauth: creating new authority file /root/.Xauthority
Updating database for machine oscarnode1.oscar.vmware.
Gathering processor count from oscarnode2.oscar.vmware.
Warning: Permanently added 'oscarnode2.oscar.vmware,192.168.15.11' (RSA) to the list
of known hosts.
/usr/X11R6/bin/xauth: creating new authority file /root/.Xauthority
Updating database for machine oscarnode2.oscar.vmware.
building file list ... done
building file list ... done
wrote 44 bytes read 20 bytes 128.00 bytes/sec
total size is 333 speedup is 5.20
wrote 44 bytes read 20 bytes 128.00 bytes/sec
total size is 333 speedup is 5.20
--> About to run /root/oscar-2.2b6/packages/pfilter/scripts/post_install for pfilter
(re)starting the pfilter firewall service on this server
/etc/init.d/pfilter restart
Restarting pfilter:[65G[[1;32m OK [0;39m]
pushing out the clients pfilter firewall configuration file
. /etc/profile.d/c3.sh && cpush /etc/pfilter.conf.clients /etc/pfilter.conf
building file list ... done
pfilter.conf.clients
wrote 535 bytes read 36 bytes 380.67 bytes/sec
total size is 877 speedup is 1.54
building file list ... done
pfilter.conf.clients
wrote 535 bytes read 36 bytes 380.67 bytes/sec
total size is 877 speedup is 1.54
(re)starting the pfilter firewall service on the clients
. /etc/profile.d/c3.sh && cexec /etc/init.d/pfilter restart
************************* oscar_cluster *************************
processing node oscarnode2.oscar.vmware
************************* oscar_cluster *************************
processing node oscarnode1.oscar.vmware
************************* oscar_cluster *************************
--------- oscarnode1.oscar.vmware---------
Restarting pfilter:[ OK ]
--------- oscarnode2.oscar.vmware---------
Restarting pfilter:[ OK ]
--> About to run /root/oscar-2.2b6/packages/ntpconfig/scripts/post_install for
ntpconfig
************************* oscar_cluster *************************
processing node oscarnode1.oscar.vmware
************************* oscar_cluster *************************
processing node oscarnode2.oscar.vmware
************************* oscar_cluster *************************
--------- oscarnode1.oscar.vmware---------
Shutting down ntpd: [ OK ]
Syncing time for ntpd. Starting ntpd: [ OK ]
--------- oscarnode2.oscar.vmware---------
Shutting down ntpd: [ OK ]
Syncing time for ntpd. Starting ntpd: [ OK ]
--> About to run /root/oscar-2.2b6/packages/switcher/scripts/post_install for switcher
Setting default for tag mpi ("lam-6.5.9")
Attribute successfully set; new attribute setting will be effective for
future shells
building file list ... done
switcher.ini
building file list ... done
switcher.ini
wrote 240 bytes read 36 bytes 552.00 bytes/sec
total size is 191 speedup is 0.69
wrote 240 bytes read 36 bytes 552.00 bytes/sec
total size is 191 speedup is 0.69
--> About to run /root/oscar-2.2b6/packages/opium/scripts/post_install for opium
building file list ... done
passwd
building file list ... done
passwd
wrote 881 bytes read 36 bytes 1834.00 bytes/sec
total size is 2081 speedup is 2.27
wrote 881 bytes read 36 bytes 1834.00 bytes/sec
total size is 2081 speedup is 2.27
building file list ... done
group
building file list ... done
group
wrote 531 bytes read 36 bytes 1134.00 bytes/sec
total size is 887 speedup is 1.56
wrote 531 bytes read 36 bytes 1134.00 bytes/sec
total size is 887 speedup is 1.56
building file list ... done
shadow
building file list ... done
shadow
wrote 420 bytes read 36 bytes 304.00 bytes/sec
total size is 1374 speedup is 3.01
wrote 420 bytes read 36 bytes 304.00 bytes/sec
total size is 1374 speedup is 3.01
building file list ... done
gshadow
building file list ... done
gshadow
wrote 404 bytes read 36 bytes 293.33 bytes/sec
total size is 697 speedup is 1.58
wrote 404 bytes read 36 bytes 293.33 bytes/sec
total size is 697 speedup is 1.58
building file list ... done
building file list ... done
wrote 51 bytes read 20 bytes 47.33 bytes/sec
total size is 191 speedup is 2.69
wrote 51 bytes read 20 bytes 47.33 bytes/sec
total size is 191 speedup is 2.69
--> About to run /root/oscar-2.2b6/packages/loghost/scripts/post_install for loghost
************************* oscar_cluster *************************
processing node oscarnode1.oscar.vmware
************************* oscar_cluster *************************
processing node oscarnode2.oscar.vmware
************************* oscar_cluster *************************
--------- oscarnode1.oscar.vmware---------
Setting loghost to 192.168.15.133
Shutting down kernel logger: [ OK ]
Shutting down system logger: [ OK ]
Starting system logger: [ OK ]
Starting kernel logger: [ OK ]
--------- oscarnode2.oscar.vmware---------
Setting loghost to 192.168.15.133
Shutting down kernel logger: [ OK ]
Shutting down system logger: [ OK ]
Starting system logger: [ OK ]
Starting kernel logger: [ OK ]
--> About to run /root/oscar-2.2b6/packages/pbs/scripts/post_install for pbs
PBS mom config file updated with clienthost: queegvm.oscar.vmware
Pushing config file to clients...
building file list ... done
config
building file list ... done
config
wrote 159 bytes read 36 bytes 390.00 bytes/sec
total size is 120 speedup is 0.62
wrote 159 bytes read 36 bytes 390.00 bytes/sec
total size is 120 speedup is 0.62
Sending SIGHUP to all moms...
************************* oscar_cluster *************************
processing node oscarnode1.oscar.vmware
************************* oscar_cluster *************************
processing node oscarnode2.oscar.vmware
************************* oscar_cluster *************************
--------- oscarnode1.oscar.vmware---------
--------- oscarnode2.oscar.vmware---------
Updating pbs_server nodes
/opt/pbs/bin/pbsnodes: Server has no node list
create node oscarnode1.oscar.vmware np = 1 , properties = all
create node oscarnode2.oscar.vmware np = 1 , properties = all
Creating pbs workq queue...
Max open servers: 4
create queue workq
set queue workq queue_type = Execution
set queue workq resources_max.cput = 10000:00:00
set queue workq resources_max.walltime = 10000:00:00
set queue workq resources_min.cput = 00:00:01
set queue workq resources_min.ncpus = 1
set queue workq resources_min.nodect = 1
set queue workq resources_min.walltime = 00:00:01
set queue workq resources_default.cput = 10000:00:00
set queue workq resources_default.ncpus = 1
set queue workq resources_default.nodect = 1
set queue workq resources_default.walltime = 10000:00:00
set queue workq enabled = True
set queue workq started = True
set server scheduling = True
set server default_queue = workq
set server query_other_jobs = True
set queue workq resources_max.ncpus = 2
set queue workq resources_max.nodect = 2
set queue workq resources_available.nodect = 2
set server resources_available.ncpus = 2
set server resources_available.nodect = 2
set server resources_available.nodes = 2
set server resources_max.ncpus = 2
set server resources_max.nodes = 2
set server scheduler_iteration = 60
Cluster setup complete!
--> Step 7: Successfully completed the cluster install
--> Successfully ran oscar_wizard
--> Successfully ran OSCAR install_cluster script
# $OpenBSD: sshd_config,v 1.48 2002/02/19 02:50:59 deraadt Exp $
# This is the sshd server system-wide configuration file. See sshd(8)
# for more information.
# This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin
# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change a
# default value.
#Port 22
Protocol 2,1
#ListenAddress 0.0.0.0
#ListenAddress ::
# HostKey for protocol version 1
HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 3600
#ServerKeyBits 768
# Logging
#obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication:
#LoginGraceTime 600
#PermitRootLogin yes
#StrictModes yes
#RSAAuthentication yes
#PubkeyAuthentication yes
#AuthorizedKeysFile .ssh/authorized_keys
# rhosts authentication should not be used
#RhostsAuthentication no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no
# Change to no to disable s/key passwords
#ChallengeResponseAuthentication yes
# Kerberos options
# KerberosAuthentication automatically enabled if keyfile exists
#KerberosAuthentication yes
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
# AFSTokenPassing automatically enabled if k_hasafs() is true
#AFSTokenPassing yes
# Kerberos TGT Passing only works with the AFS kaserver
#KerberosTgtPassing no
# Set this to 'yes' to enable PAM keyboard-interactive authentication
# Warning: enabling this may bypass the setting of 'PasswordAuthentication'
#PAMAuthenticationViaKbdInt yes
X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#KeepAlive yes
#UseLogin no
#MaxStartups 10
# no default banner path
#Banner /some/path
#VerifyReverseMapping no
# override default of no subsystems
Subsystem sftp /usr/lib/ssh/sftp-server
IgnoreRhosts yes
RhostsRSAAuthentication yes
RSAAuthentication yes
RhostsAuthentication no
