Evgeniy,
Well it wasn't a problem with /etc/securetty. But you got me thinking
in the right direction! THANK YOU!
One of my folks had installed a pam module - to restrict access to login
to root - except from a specific set of internal IP addresses.
Somehow this:
/etc/pam.d/system-auth
##################
account required pam_access.so
##################
/etc/security/access.conf
##################
+ : root : 10.0.0.0/8 127.0.0.1
- : root : ALL
##################
Blocks all ability to login to ROOT ( including SU ) - when there is no
IP address configured on the Interfaces ( which of course happens by
default when you import the VM ).
The moment there is a IP on the primary NIC - everything works properly
again.
So procedurally - I will do the following going forward.
1. EDIT - /etc/pam.d/system-auth ( DELETE the line - "account
required pam_access.so" )
2. Export the VM from source XCP Host.
3. Import the VM from the VDI file into the target XCP Host.
4. Login configure IPs on the imported VM
5. Re-ADD the PAM line deleted in Step#1.
Hope this chatter helps someone else in the future.
-Michael
Evgeniy Chupriyanov wrote on 6/4/2013 4:52 AM:
04.06.2013, в 12:06, Michael @ Professional Edge LLC
<m...@professionaledgellc.com> написал(а):
XCP 1.6 - new Host #3 deployed last week - every VM I export from Host#1 or
Host#2 - imports fine... but I'm unable to login, after a successful import.
================================================
[root@host3 ~]# xe console vm=test1
...
Kernel 2.6.18-308.1.1.el5xen on an x86_64
(test1.FQDN) login: root
Password:
Permission denied
================================================
Looks like console device name (/dev/console or /dev/xvc0) is missing from
/etc/securetty
You can login as usual (non-root) user, than su to root and add correct dev
name to /etc/securetty
_______________________________________________
Xen-api mailing list
Xen-api@lists.xen.org
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api
_______________________________________________
Xen-api mailing list
Xen-api@lists.xen.org
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api
