[Swift-devel] ssh data provider

Thu Dec 11 18:21:49 CST 2008

Hi, Mike

On BGP, we could ssh to IO nodes even if there is no private key. So I 
was assuming there should not be any passphrase either.
I created one pair of keys, and tried with the private key, even though 
the public key is not deployed on IO nodes, it still worked.

Ben, this is also what you ask for.

zzhang at login6.surveyor:~> ssh -v ion-1
OpenSSH_4.2p1, OpenSSL 0.9.8a 11 Oct 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: /etc/ssh/ssh_config line 25: Deprecated option 
"RhostsAuthentication"
debug1: Connecting to ion-1 [172.16.3.1] port 22.
debug1: Connection established.
debug1: identity file /home/zzhang/.ssh/identity type -1
debug1: identity file /home/zzhang/.ssh/id_rsa type -1
debug1: identity file /home/zzhang/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.2
debug1: match: OpenSSH_4.2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'ion-1' is known and matches the RSA host key.
debug1: Found key in /home/zzhang/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: 
publickey,keyboard-interactive,hostbased
debug1: Next authentication method: hostbased
debug1: Remote: Accepted for login6-data.surveyor.alcf.anl.gov 
[172.17.3.16] by /etc/ssh/shosts.equiv.
debug1: Authentications that can continue: 
publickey,keyboard-interactive,hostbased
debug1: Remote: Accepted for login6-data.surveyor.alcf.anl.gov 
[172.17.3.16] by /etc/ssh/shosts.equiv.
debug1: Authentication succeeded (hostbased).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
Last login: Thu Dec 11 18:15:46 2008 from login6-data.surveyor.alcf.anl.gov

BusyBox v1.4.2 (2008-05-07 02:58:20 UTC) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

/gpfs/home/zzhang $

zhao

Michael Wilde wrote:
> Zhao: be *very* careful with creating and placing an ssh key without a 
> passphrase.
>
> Anyone that can obtain your private key can then get in anywhere you 
> have this key placed.
>
> So dont put the key anywhere outside of intrepid (which is well 
> protected by its cryptocard-only access)
>
> - Mike
>
>
> On 12/11/08 4:14 PM, Zhao Zhang wrote:
>> Hi, All
>>
>> I am trying to make the ssh data provider working between BG login 
>> node and IO node.
>> In this context, we could ssh from login nodes to IO nodes without a 
>> passphrase.
>>
>> I made a test, it failed:
>> zzhang at login6.surveyor:~/swift/test> swift -sites.file ./sites.xml 
>> -tc.file ./tc.data first.swift
>> Swift svn swift-r2334 (Swift modified locally) cog-r2216
>>
>> RunID: 20081211-1604-6otxvqtb
>> Progress:
>> echo started
>> Sorted: [bgp000:1,000.000(98.545):0/789 overload: 0]
>> Sorted: [bgp000:999.590(98.544):0/789 overload: 0]
>> Sorted: [bgp000:999.180(98.544):0/789 overload: 0]
>> echo failed
>> Execution failed:
>>        Could not initialize shared directory on bgp000
>> Caused by:
>>        org.globus.cog.abstraction.impl.file.FileResourceException: 
>> Error while communicating with the SSH server on 172.16.3.6:22
>> Caused by:
>>        Public Key Authentication failed
>>
>>
>> My sites.xml is like belwo:
>> zzhang at login6.surveyor:~/swift/test> cat sites.xml
>> <?xml version="1.0" encoding="UTF-8"?>
>> <config xmlns="http://www.griphyn.org/chimera/GVDS-PoolConfig"
>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.5">
>> <pool handle="bgp000">
>>        <filesystem url="172.16.3.6" provider="ssh"/>
>>        <execution provider="deef" 
>> url="http://172.16.3.6:50001/wsrf/services/GenericPortal/core/WS/GPFactoryService"/> 
>>
>>        <workdirectory>/tmp</workdirectory>
>>        <profile namespace="karajan" key="jobThrottle">8</profile>
>>        <profile namespace="karajan" key="initialScore">1000</profile>
>> </pool>
>>
>> </config>
>>
>> My auth.defaults is this:
>> zzhang at login6.surveyor:~/swift/test> cat ~/.ssh/auth.defaults
>> 172.16.3.6.type=key
>> 172.16.3.6.username=zzhang
>> 172.16.3.6.key=/home/zzhang/.ssh/id_rsa
>> 172.16.3.6.passphrase=""
>>
>> The log file could be reached at 
>> http://www.ci.uchicago.edu/~zzhang/first-20081211-1604-6otxvqtb.log
>>
>> Thanks.
>>
>> best wishes
>> zhangzhao
>> _______________________________________________
>> Swift-devel mailing list
>> Swift-devel at ci.uchicago.edu
>> http://mail.ci.uchicago.edu/mailman/listinfo/swift-devel
>