Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trusted Clusters do not work with Authorized Keys Format #918

Closed
russjones opened this issue Apr 10, 2017 · 1 comment
Closed

Trusted Clusters do not work with Authorized Keys Format #918

russjones opened this issue Apr 10, 2017 · 1 comment
Assignees
Labels

Comments

@russjones
Copy link
Contributor

russjones commented Apr 10, 2017

Problem

If you export Trusted Clusters with the new style format of host CA in known_hosts format and User CA authorized_keys format, both CAs are loaded into the backend correctly and visible from the Web UI, but you are not able to connect to a node within the Trusted Cluster. In the Web UI you will see:

access denied to root connecting to node-on-second-cluster                                                                                
disconnected  

Within the logs you will see:

level=debug msg="[SSH] conn(172.10.0.1:51294->172.10.1.2:3022, user=root) auth attempt with key [email protected] 13:ae:ed:de:5a:20:6a:7e:db:c0:db:61:74:de:c8:5c" file="srv/sshserver.go:556" func="srv.(*Server).keyAuth" 
level=debug msg="[SSH] successfully authenticated" file="srv/sshserver.go:596" fingerprint="[email protected] 13:ae:ed:de:5a:20:6a:7e:db:c0:db:61:74:de:c8:5c" func="srv.(*Server).keyAuth" local=172.10.1.2:3022 remote=172.10.0.1:51294 user=root 
level=debug msg="[HA SSH NODE] checkPermsissionToLogin(rjones, root)" file="srv/sshserver.go:404" func="srv.(*Server).checkPermissionToLogin" 
level=error msg="role root is not found" file="srv/sshserver.go:616" fingerprint="[email protected] 13:ae:ed:de:5a:20:6a:7e:db:c0:db:61:74:de:c8:5c" func="srv.(*Server).keyAuth" local=172.10.1.2:3022 remote=172.10.0.1:51294 user=root 
@pmoust
Copy link

pmoust commented Apr 11, 2017

Hit that as well - #919 should cover it, thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants