[BackupPC-users] No luck with Fedora F15 client
Tried to setup as before so backuppc user on server can ssh as root on client. No luck. If I test, public key doesn't work. Yes, on client .ssh permissions are OK, and there are no log messages saying otherwise. I did see some selinux warnings, but selinux is set to permissive - so that these warnings shouldn't do anything. Just in case I followed instructions /sbin/restorecon -Rv /root/.ssh. Now now messages logged. Just doesn't work. Anyone got this working or have suggestions? -- Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] No luck with Fedora F15 client
On Fri, May 13, 2011 at 2:18 PM, Neal Becker ndbeck...@gmail.com wrote: Tried to setup as before so backuppc user on server can ssh as root on client. No luck. If I test, public key doesn't work. You probably did things this way but you didn't specify so I'm just checking. When I'm setting up a client I don't quite follow the FAQ by manually exchanging keys when it's a lot easier to use ssh-copy-id, so my process is (on server) # su -l backuppc -s /bin/bash $ ssh-copy-id root@client (get the known host prompt, say yes then logout of client) (verify passwordless login works) # ssh root@client If that's working, what's the backup method you're using? rsync? Richard -- Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] No luck with Fedora F15 client
On 5/13/2011 2:18 PM, Neal Becker wrote: Tried to setup as before so backuppc user on server can ssh as root on client. No luck. If I test, public key doesn't work. Yes, on client .ssh permissions are OK, and there are no log messages saying otherwise. Add -vv to the ssh command line for the test so you can see which identities you are trying and perhaps why they fail. You probably need to be using rsa2 or dsa keypairs with more recent ssh versions. -- Les Mikesell lesmikes...@gmail.com -- Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] No luck with Fedora F15 client
Richard Shaw wrote: On Fri, May 13, 2011 at 2:18 PM, Neal Becker ndbeck...@gmail.com wrote: Tried to setup as before so backuppc user on server can ssh as root on client. No luck. If I test, public key doesn't work. You probably did things this way but you didn't specify so I'm just checking. When I'm setting up a client I don't quite follow the FAQ by manually exchanging keys when it's a lot easier to use ssh-copy-id, so my process is (on server) # su -l backuppc -s /bin/bash $ ssh-copy-id root@client (get the known host prompt, say yes then logout of client) (verify passwordless login works) # ssh root@client If that's working, what's the backup method you're using? rsync? Richard It's the passwordless login that isn't working. But, nothing logged on client to indicate why. I had tried ssh -v from backuppc on server to root on client. It showed trying rsa and dsa keys (I use dsa), then falling back to asking for password. Nothing on client log (/var/log/secure, /var/log/messages) to indicate why it failed. Similar setup was working on Fedora 14 before I did a fresh install of Fedora 15. -- Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] No luck with Fedora F15 client
On Fri, 2011-05-13 at 16:54 -0400, Neal Becker wrote: I had tried ssh -v from backuppc on server to root on client. It showed trying rsa and dsa keys (I use dsa), then falling back to asking for password. Did it list which keys it tried? It should identify the filename it is trying. Are you sure your SSH keys have the right permissions and are owned by the backuppc user, in the right location? Perhaps some successful debug output will help you. See attached, which is me SSH'ing as backuppc from my server gozer to client frances. Regards, Tyler -- The paradox of dictating democracy, of enforcing freedom, of extorting emancipation. -- Niall Ferguson, Colossus: The Price of America's Empire (2004) ckuppc@gozer:~$ ssh -v root@frances OpenSSH_5.5p1 Debian-4ubuntu5, OpenSSL 0.9.8o 01 Jun 2010 debug1: Reading configuration data /var/lib/backuppc/.ssh/config debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to frances [192.168.0.128] port 22. debug1: Connection established. debug1: identity file /var/lib/backuppc/.ssh/id_rsa type 1 debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048 debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048 debug1: identity file /var/lib/backuppc/.ssh/id_rsa-cert type -1 debug1: identity file /var/lib/backuppc/.ssh/id_dsa type -1 debug1: identity file /var/lib/backuppc/.ssh/id_dsa-cert type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3p1 Debian-3ubuntu6 debug1: match: OpenSSH_5.3p1 Debian-3ubuntu6 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.5p1 Debian-4ubuntu5 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server-client aes128-ctr hmac-md5 none debug1: kex: client-server aes128-ctr hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(102410248192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host 'frances' is known and matches the RSA host key. debug1: Found key in /var/lib/backuppc/.ssh/known_hosts:6 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: Roaming not allowed by server debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,password debug1: Next authentication method: publickey debug1: Offering public key: /var/lib/backuppc/.ssh/id_rsa debug1: Server accepts key: pkalg ssh-rsa blen 279 debug1: read PEM private key done: type RSA debug1: Authentication succeeded (publickey). debug1: channel 0: new [client-session] debug1: Requesting no-more-sessi...@openssh.com debug1: Entering interactive session. debug1: Sending environment. debug1: Sending env LANG = en_GB.UTF-8 Linux frances 2.6.32-31-generic #61-Ubuntu SMP Fri Apr 8 18:24:35 UTC 2011 i686 GNU/Linux Ubuntu 10.04.2 LTS Welcome to Ubuntu! * Documentation: https://help.ubuntu.com/ 0 packages can be updated. 0 updates are security updates. Last login: Mon May 9 06:10:23 2011 from localhost -- Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] No luck with Fedora F15 client
On Fri, May 13, 2011 at 10:27:45PM +0100, Tyler J. Wagner wrote: On Fri, 2011-05-13 at 16:54 -0400, Neal Becker wrote: I had tried ssh -v from backuppc on server to root on client. It showed trying rsa and dsa keys (I use dsa), then falling back to asking for password. Did it list which keys it tried? It should identify the filename it is trying. Are you sure your SSH keys have the right permissions and are owned by the backuppc user, in the right location? Perhaps some successful debug output will help you. See attached, which is me SSH'ing as backuppc from my server gozer to client frances. ckuppc@gozer:~$ ssh -v root@frances OpenSSH_5.5p1 Debian-4ubuntu5, OpenSSL 0.9.8o 01 Jun 2010 debug1: Reading configuration data /var/lib/backuppc/.ssh/config Also in addition to debugging from the client you can run the sshd on a higher numbered port with debugging enabled: sudo /usr/sbin/sshd -d -e -p and then use: backuuser% ssh -v -p remotehost to connect. -- -- rouilj John Rouillard System Administrator Renesys Corporation 603-244-9084 (cell) 603-643-9300 x 111 -- Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
