Putting together a minimal firewall that works reliably with NFS is
difficult because the ports change around every time the machine gets
rebooted. So you have to make a script to find out what ports are currently
in use and then open those ports.
Try doing these commands, first on the head node:
ls -l ~
ls -l /home
ls -l .ssh
ssh -vvv oscarnode1
ls -l ~
ls -l .ssh
ls -l /home
sshd is very picky about permissions, and while you shouldn't have to mess
with them, it is worth checking.
On Mon, Sep 15, 2008 at 1:48 PM, Joseph Norris <[EMAIL PROTECTED]> wrote:
> Ok - I found out why my mount was not happening - took care of this and
> the exec mount -all was successful. On the head node I deleted the .ssh
> directory for a user - signed in and got the following ( which appeared
> hopeful )
>
>
> generating ssh file /home/joseph/.ssh/id_dsa ...
> Generating public/private dsa key pair.
> Created directory '/home/joseph/.ssh'.
> Your identification has been saved in /home/joseph/.ssh/id_dsa.
> Your public key has been saved in /home/joseph/.ssh/id_dsa.pub.
> The key fingerprint is:
> 07:4b:3b:79:06:de:d0:6e:84:bd:49:da:a3:9a:1f:10 [EMAIL PROTECTED]
> generating ssh file /home/joseph/.ssh/identity ...
> Generating public/private rsa1 key pair.
> Your identification has been saved in /home/joseph/.ssh/identity.
> Your public key has been saved in /home/joseph/.ssh/identity.pub.
> The key fingerprint is:
> cf:64:8c:97:d8:e3:98:67:5f:c0:4e:eb:97:96:be:44 [EMAIL PROTECTED]
> generating ssh file /home/joseph/.ssh/id_rsa ...
> Generating public/private rsa key pair.
> Your identification has been saved in /home/joseph/.ssh/id_rsa.
> Your public key has been saved in /home/joseph/.ssh/id_rsa.pub.
> The key fingerprint is:
> 10:f0:3d:ad:b3:13:53:35:fe:39:cf:31:9a:b2:21:20 [EMAIL PROTECTED]
> adding id to ssh file /home/joseph/.ssh/authorized_keys2
> adding id to ssh file /home/joseph/.ssh/authorized_keys
> adding id to ssh file /home/joseph/.ssh/authorized_keys2
>
>
> however when I attempted to ssh as this user to a compute node I got a
> password prompt - I was able to log in to the compute node and home for
> that user was mounted. I am still faced with the issue of password prompt
> Joseph Norris wrote:
> > man I do not know what to do about this:
> >
> > I had trouble with nfs before and determined that it was my firewall. I
> > set my firewall so that nfs could be opened and here is what I am
> getting:
> >
> > ************************* oscar_cluster *************************
> > --------- oscarnode1---------
> > mount: mount to NFS server 'nfs_oscar' failed: System Error: No route to
> > host.
> > --------- oscarnode2---------
> > mount: mount to NFS server 'nfs_oscar' failed: System Error: No route to
> > host.
> > --------- oscarnode3---------
> > mount: mount to NFS server 'nfs_oscar' failed: System Error: No route to
> > host.
> > --------- oscarnode4---------
> > mount: mount to NFS server 'nfs_oscar' failed: System Error: No route to
> > host.
> >
> >
> >
> > Juan Pedro Montavez wrote:
> >
> >> It seems to be a problem with nfs system, home directory is not mounted.
> >>
> >> Log as root and
> >>
> >>
> >>> cexec mount -all
> >>>
> >>>
> >> after that, you can try to log again as any user.
> >>
> >> I hope this work
> >>
> >>
> >>
> >>
> >> El lun, 15-09-2008 a las 09:26 -0700, Joseph Norris escribió:
> >>
> >>
> >>> no question is silly - just the question that is not asked. Here is
> >>> what I get when I try to log in as a test user:
> >>>
> >>> [EMAIL PROTECTED] ~]$ ssh oscarnode1
> >>> [EMAIL PROTECTED]'s password:
> >>> Last login: Fri Sep 12 12:43:02 2008 from madrid.ucmerced.edu
> >>> Could not chdir to home directory /home/joseph: No such file or
> directory
> >>> -bash: cd: /home/joseph: No such file or directory
> >>> cannot cd to home directory /home/joseph
> >>>
> >>> but this is strange because when I log in as root I can move from head
> >>> node to compute node and home has been mounted
> >>>
> >>>
> >>>
> >>> Michael Edwards wrote:
> >>>
> >>>
> >>>> Silly question, when you are prompted for the password to the node,
> >>>> can you successfully log in?
> >>>>
> >>>> Something you can try. Log in as one of the new users, do "rm -rf
> >>>> .ssh" in their home directory. Then log out and back in again. You
> >>>> should get a lot of spam on the terminal when you log in and then you
> >>>> should have a .ssh directory again with dsa and rsa files in it.
> >>>>
> >>>> If not, then your installation is missing some important scripts for
> >>>> some reason.
> >>>>
> >>>> On Mon, Sep 15, 2008 at 11:59 AM, Joseph Norris <[EMAIL PROTECTED]
> >>>> <mailto:[EMAIL PROTECTED]>> wrote:
> >>>>
> >>>> Michael
> >>>>
> >>>> They appear to be the same with one exception. The headnode
> >>>> passwd file
> >>>> does not have this line that the compute nodes have:
> >>>>
> >>>> nfsnobody:x:65534:65534:Anonymous NFS
> User:/var/lib/nfs:/sbin/nologin
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>> Joseph Norris wrote:
> >>>> > ok - will check - thanks.
> >>>> >
> >>>> > Michael Edwards wrote:
> >>>> >
> >>>> >> Joseph,
> >>>> >>
> >>>> >> You didn't answer my question. You need to check and see if
> the
> >>>> >> /etc/passwd file is the same on the head and compute nodes.
> >>>> >>
> >>>> >> The keys are probably fine if the home directories are mounted
> >>>> on the
> >>>> >> nodes.
> >>>> >> The .ssh directory should have your keys in it and is part of
> >>>> your nfs
> >>>> >> mounted home dir.
> >>>> >>
> >>>> >> If the nfs directory is not mounted, that would cause a
> password
> >>>> >> prompt also.
> >>>> >>
> >>>> >> Mike Edwards
> >>>> >>
> >>>> >> On Sun, Sep 14, 2008 at 9:45 PM, DongInn Kim <[EMAIL PROTECTED]
> >>>> <mailto:[EMAIL PROTECTED]>
> >>>> >> <mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>> wrote:
> >>>> >>
> >>>> >> Hi John,
> >>>> >>
> >>>> >> All the nodes should have /etc/profile.d/ssh-oscar.{sh,csh}
> >>>> >> installed during the oscar installation and they should
> >>>> take care
> >>>> >> of the ssh key things.
> >>>> >>
> >>>> >> If ssh-oscar.{sh,csh} is not setup on all the nodes, there
> >>>> must be
> >>>> >> something wrong.
> >>>> >>
> >>>> >> Regards,
> >>>> >>
> >>>> >> - DongInn
> >>>> >>
> >>>> >>
> >>>> >> Joseph Norris wrote:
> >>>> >> > Does this have to do with the keys? I think that the
> keys
> >>>> >> should be set
> >>>> >> > up so that I do not need a password from head node to
> compute
> >>>> >> node. Thanks.
> >>>> >> >
> >>>> >> > Michael Edwards wrote:
> >>>> >> >> Is the sync files working? Check and see if /etc/passwd
> and
> >>>> >> friends
> >>>> >> >> are the head and nodes.
> >>>> >> >>
> >>>> >> >> On Fri, Sep 12, 2008 at 3:55 PM, Joseph Norris
> >>>> >> <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> >>>> <mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
> >>>> >> >> <mailto:[EMAIL PROTECTED]
> >>>> <mailto:[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]
> >>>> <mailto:[EMAIL PROTECTED]>>>> wrote:
> >>>> >> >>
> >>>> >> >> Ok - I am confused
> >>>> >> >>
> >>>> >> >> When I log into the head node and I take root via
> >>>> sudo - I
> >>>> >> can ssh to
> >>>> >> >> any compute node without a password. However when I
> >>>> build
> >>>> >> a new user,
> >>>> >> >> do the sync of files then sign in - I get a password
> >>>> challenge
> >>>> >> >> when try
> >>>> >> >> to go to a compute node. home is being mounted on
> each
> >>>> >> compute node
> >>>> >> >> from the head node - not sure what is happening.
> >>>> >> >>
> >>>> >> >> thanks.
> >>>> >> >>
> >>>> >> >> --
> >>>> >> >> Joseph Norris
> >>>> >> >> Application Developer & Server Administrator
> >>>> >> >> 209-228-4576
> >>>> >> >> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> >>>> <mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
> >>>> >> <mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> >>>> <mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>>
> >>>> >> >>
> >>>> >> >>
> >>>> >> >>
> >>>> >>
> >>>>
> -------------------------------------------------------------------------
> >>>> >> >> This SF.Net email is sponsored by the Moblin Your
> Move
> >>>> >> Developer's
> >>>> >> >> challenge
> >>>> >> >> Build the coolest Linux based applications with
> >>>> Moblin SDK
> >>>> >> & win
> >>>> >> >> great prizes
> >>>> >> >> Grand prize is a trip for two to an Open Source
> event
> >>>> >> anywhere in
> >>>> >> >> the world
> >>>> >> >>
> >>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>
> >>>> >> <
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>>
> >>>> >> >>
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>
> >>>> >> <
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>>>
> >>>> >> >> _______________________________________________
> >>>> >> >> Oscar-users mailing list
> >>>> >> >> Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>
> >>>> >> <mailto:Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>>
> >>>> >> >> <mailto:Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>
> >>>> >> <mailto:Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>>>
> >>>> >> >>
> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>>> >> >>
> >>>> >> >>
> >>>> >> >>
> >>>> >>
> >>>>
> ------------------------------------------------------------------------
> >>>> >> >>
> >>>> >> >>
> >>>> >>
> >>>>
> -------------------------------------------------------------------------
> >>>> >> >> This SF.Net email is sponsored by the Moblin Your Move
> >>>> >> Developer's challenge
> >>>> >> >> Build the coolest Linux based applications with Moblin
> SDK &
> >>>> >> win great prizes
> >>>> >> >> Grand prize is a trip for two to an Open Source event
> >>>> anywhere
> >>>> >> in the world
> >>>> >> >>
> >>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>
> >>>> >> <
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>>
> >>>> >> >>
> >>>> >>
> >>>>
> ------------------------------------------------------------------------
> >>>> >> >>
> >>>> >> >> _______________________________________________
> >>>> >> >> Oscar-users mailing list
> >>>> >> >> Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>
> >>>> >> <mailto:Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>>
> >>>> >> >>
> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>>> >> >>
> >>>> >> >
> >>>> >>
> >>>> >>
> >>>>
> -------------------------------------------------------------------------
> >>>> >> This SF.Net email is sponsored by the Moblin Your Move
> >>>> Developer's
> >>>> >> challenge
> >>>> >> Build the coolest Linux based applications with Moblin SDK
> >>>> & win
> >>>> >> great prizes
> >>>> >> Grand prize is a trip for two to an Open Source event
> >>>> anywhere in
> >>>> >> the world
> >>>> >> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>
> >>>> >> <
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>>
> >>>> >> _______________________________________________
> >>>> >> Oscar-users mailing list
> >>>> >> Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>
> >>>> >> <mailto:Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>>
> >>>> >> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>>> >>
> >>>> >>
> >>>> >>
> >>>>
> ------------------------------------------------------------------------
> >>>> >>
> >>>> >>
> >>>>
> -------------------------------------------------------------------------
> >>>> >> This SF.Net email is sponsored by the Moblin Your Move
> >>>> Developer's challenge
> >>>> >> Build the coolest Linux based applications with Moblin SDK &
> >>>> win great prizes
> >>>> >> Grand prize is a trip for two to an Open Source event anywhere
> >>>> in the world
> >>>> >> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>
> >>>> >>
> >>>>
> ------------------------------------------------------------------------
> >>>> >>
> >>>> >> _______________________________________________
> >>>> >> Oscar-users mailing list
> >>>> >> Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>
> >>>> >> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>>> >>
> >>>> >>
> >>>> >
> >>>> >
> >>>>
> >>>> --
> >>>> Joseph Norris
> >>>> Application Developer & Server Administrator
> >>>> 209-228-4576
> >>>> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> >>>>
> >>>>
> >>>>
> -------------------------------------------------------------------------
> >>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
> >>>> challenge
> >>>> Build the coolest Linux based applications with Moblin SDK & win
> >>>> great prizes
> >>>> Grand prize is a trip for two to an Open Source event anywhere in
> >>>> the world
> >>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>> <http://moblin-contest.org/redirect.php?banner_id=100&url=/>
> >>>> _______________________________________________
> >>>> Oscar-users mailing list
> >>>> Oscar-users@lists.sourceforge.net
> >>>> <mailto:Oscar-users@lists.sourceforge.net>
> >>>> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>>>
> >>>>
> >>>>
> ------------------------------------------------------------------------
> >>>>
> >>>>
> -------------------------------------------------------------------------
> >>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> >>>> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> >>>> Grand prize is a trip for two to an Open Source event anywhere in the
> world
> >>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >>>>
> ------------------------------------------------------------------------
> >>>>
> >>>> _______________________________________________
> >>>> Oscar-users mailing list
> >>>> Oscar-users@lists.sourceforge.net
> >>>> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>>>
> >>>>
> >>>>
> >>
> -------------------------------------------------------------------------
> >> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> >> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> >> Grand prize is a trip for two to an Open Source event anywhere in the
> world
> >> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> >> _______________________________________________
> >> Oscar-users mailing list
> >> Oscar-users@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/oscar-users
> >>
> >>
> >
> >
>
> --
> Joseph Norris
> Application Developer & Server Administrator
> 209-228-4576
> [EMAIL PROTECTED]
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Oscar-users mailing list
> Oscar-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/oscar-users
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Oscar-users mailing list
Oscar-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/oscar-users
