What happens when you change the default, but also add a "Match" directive 
overriding that option for the engine ?

Best Regards,
Strahil Nikolov






В четвъртък, 12 ноември 2020 г., 10:01:12 Гринуич+2, Angus Clarke 
<an...@charworth.com> написа: 





  

Hello




Sharing for anyone who needs it, this was carried out on OL7, they use ovirt 4.3

In short: both the hosted-engine deployment routine and the host add to cluster 
routine distribute public ssh keys to /root/.ssh/authorized_keys regardless of 
the AuthorizedKeysFile setting in /etc/ssh/sshd_config. Both routines fail if 
AuthorizedKeysfile is not default.



The hosted-engine setup assumes AuthorizedKeysFile to be default 
(~/.ssh/authorized_keys) and creates a public key there, instead of following 
the sshd_config directive. The setup fails on the back of this. Once I 
commented this out of sshd_config file (assumes default) and restarted sshd on 
the KVM host that was running the hosted-engine deployment, the hosted-engine 
setup completed successfully. Similarly, I could not deploy a second KVM host 
to the compute cluster until I had altered this setting on that 2nd KVM host - 
presumably that process has some similar routine that unwittingly writes keys 
to ~/.ssh/authorized_keys.HTH

Angus



_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UMJ4Y622RALUU6QKPNREYS43BP324ODT/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ASCLUVH3LRGVTNOMOUVC5EO2E3E2NNRX/

Reply via email to