# Oneadmin passwordless ssh error **URL:** \ **Category:** Product Support\ **Created:** [March 31, 2016, 3:23pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036 "2016-03-31T15:23:37Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![rmm0707](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rmm0707](https://forum.opennebula.io/u/rmm0707)\ **Post date:** [March 31, 2016, 3:23pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/1 "2016-03-31T15:23:37Z")
so I’ve followed the quick start guide for CentOS7. I have a server and 2 nodes. I cannot ssh passwordless using oneadmin from the server to either node (all are physically different devices). So here’s what I’ve done: (on the server) ssh-keygen -t rsa cat .ssh/id\_rsa.pub \>\> .ssh/authorized\_keys [oneadmin@server ~]$ ls -l .ssh total 24 -rw-------. 1 oneadmin oneadmin 1068 Mar 31 11:33 authorized\_keys -rw-------. 1 oneadmin oneadmin 87 Mar 31 12:11 config -rw-------. 1 oneadmin oneadmin 668 Mar 28 10:42 id\_dsa -rw-r–r--. 1 oneadmin oneadmin 638 Mar 28 10:42 id\_dsa.pub -rw-------. 1 oneadmin oneadmin 1679 Mar 31 11:25 id\_rsa -rw-r–r--. 1 oneadmin oneadmin 430 Mar 31 11:25 id\_rsa.pub [oneadmin@server ~]$ Here is me trying to login passwordless to node 1, yet it asks for password [oneadmin@server ~]$ ssh -v node1 OpenSSH\_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013 debug1: Reading configuration data /var/lib/one/.ssh/config debug1: /var/lib/one/.ssh/config line 1: Applying options for \* debug1: Reading configuration data /etc/ssh/ssh\_config debug1: /etc/ssh/ssh\_config line 56: Applying options for \* debug1: Connecting to node1 [XXX.XXX.XXX.2] port 22. debug1: fd 3 clearing O\_NONBLOCK debug1: Connection established. debug1: identity file /var/lib/one/.ssh/id\_rsa type 1 debug1: identity file /var/lib/one/.ssh/id\_rsa-cert type -1 debug1: identity file /var/lib/one/.ssh/id\_dsa type 2 debug1: identity file /var/lib/one/.ssh/id\_dsa-cert type -1 debug1: identity file /var/lib/one/.ssh/id\_ecdsa type -1 debug1: identity file /var/lib/one/.ssh/id\_ecdsa-cert type -1 debug1: identity file /var/lib/one/.ssh/id\_ed25519 type -1 debug1: identity file /var/lib/one/.ssh/id\_ed25519-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH\_6.6.1 debug1: Remote protocol version 2.0, remote software version OpenSSH\_6.6.1 debug1: match: OpenSSH\_6.6.1 pat OpenSSH\_6.6.1\* compat 0x04000000 debug1: SSH2\_MSG\_KEXINIT sent debug1: SSH2\_MSG\_KEXINIT received debug1: kex: server-\>client aes128-ctr [hmac-md5-etm@openssh.com](mailto:hmac-md5-etm@openssh.com) none debug1: kex: client-\>server aes128-ctr [hmac-md5-etm@openssh.com](mailto:hmac-md5-etm@openssh.com) none debug1: kex: [curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org) need=16 dh\_need=16 debug1: kex: [curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org) need=16 dh\_need=16 debug1: sending SSH2\_MSG\_KEX\_ECDH\_INIT debug1: expecting SSH2\_MSG\_KEX\_ECDH\_REPLY debug1: Server host key: ECDSA 61:f3:fe:da:63:03:0c:5e:6e:cc:4f:ec:98:16:bf:87 Warning: Permanently added ‘node1,XXX.XXX.XXX.2’ (ECDSA) to the list of known hosts. debug1: ssh\_ecdsa\_verify: signature correct debug1: SSH2\_MSG\_NEWKEYS sent debug1: expecting SSH2\_MSG\_NEWKEYS debug1: SSH2\_MSG\_NEWKEYS received debug1: Roaming not allowed by server debug1: SSH2\_MSG\_SERVICE\_REQUEST sent debug1: SSH2\_MSG\_SERVICE\_ACCEPT received debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password debug1: Next authentication method: gssapi-keyex debug1: No valid Key exchange context debug1: Next authentication method: gssapi-with-mic debug1: Unspecified GSS failure. Minor code may provide more information No Kerberos credentials available debug1: Unspecified GSS failure. Minor code may provide more information No Kerberos credentials available debug1: Unspecified GSS failure. Minor code may provide more information debug1: Unspecified GSS failure. Minor code may provide more information No Kerberos credentials available debug1: Next authentication method: publickey debug1: Offering RSA public key: /var/lib/one/.ssh/id\_rsa debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password debug1: Offering DSA public key: /var/lib/one/.ssh/id\_dsa debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password debug1: Trying private key: /var/lib/one/.ssh/id\_ecdsa debug1: Trying private key: /var/lib/one/.ssh/id\_ed25519 debug1: Next authentication method: password oneadmin@node1’s password: debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password Permission denied, please try again. oneadmin@node1’s password: debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password Permission denied, please try again. oneadmin@node1’s password: [oneadmin@server ~]$ [oneadmin@server ~]$ onehost show node1 HOST 0 INFORMATION ID : 0 NAME : node1 CLUSTER : - STATE : ERROR IM\_MAD : kvm VM\_MAD : kvm VN\_MAD : dummy LAST MONITORING TIME : 03/31 12:22:13 HOST SHARES TOTAL MEM : 0K USED MEM (REAL) : 0K USED MEM (ALLOCATED) : 0K TOTAL CPU : 0 USED CPU (REAL) : 0 USED CPU (ALLOCATED) : 0 RUNNING VMS : 0 MONITORING INFORMATION ERROR=“Thu Mar 31 12:22:13 2016 : Error monitoring Host node1 (0): -“ RESERVED\_CPU=”“ RESERVED\_MEM=”” VIRTUAL MACHINES ``` ID USER GROUP NAME STAT UCPU UMEM HOST TIME ``` [oneadmin@server ~]$ [oneadmin@server ~]$ Also, SELINUX is Permissive on all devices. I’m not sure what I’m missing here. I’d appreciate any help. ---
**Author:** ![knawnd](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/knawnd/32/6119_2.png) [@knawnd](https://forum.opennebula.io/u/knawnd)\ **Post date:** [March 31, 2016, 3:27pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/2 "2016-03-31T15:27:46Z")
Just a quick guess: what are permissions on ~oneadmin/.ssh dir ? I normally do ‘chmod 700 ~user/.ssh’. ---
**Author:** ![rmm0707](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rmm0707](https://forum.opennebula.io/u/rmm0707)\ **Post date:** [March 31, 2016, 3:28pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/3 "2016-03-31T15:28:42Z")
They are 600 as per documentation. ---
**Author:** ![knawnd](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/knawnd/32/6119_2.png) [@knawnd](https://forum.opennebula.io/u/knawnd)\ **Post date:** [March 31, 2016, 4:53pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/4 "2016-03-31T16:53:09Z")
Have you tried to change ~user/.ssh directory permissions to 700 to check if that fixs the problem? ---
**Author:** ![rmm0707](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rmm0707](https://forum.opennebula.io/u/rmm0707)\ **Post date:** [March 31, 2016, 4:54pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/5 "2016-03-31T16:54:31Z")
Would I only need to change it on the server? Or on the node(s) as well? ---
**Author:** ![knawnd](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/knawnd/32/6119_2.png) [@knawnd](https://forum.opennebula.io/u/knawnd)\ **Post date:** [March 31, 2016, 4:59pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/6 "2016-03-31T16:59:35Z")
> [@rmm0707](#): > > Would I only need to change it on the server? Or on the node(s) as well? On the host you try to connect to. In case of opennebula oneadmin user needs to have passwordless access from front-end node (FN) to cloud node (CN). So try to run ‘chmod 700 ~oneadmin/.ssh’ on the CN and then try to connect as oneadmin user from FN to that CN. ---
**Author:** ![rmm0707](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rmm0707](https://forum.opennebula.io/u/rmm0707)\ **Post date:** [March 31, 2016, 5:02pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/7 "2016-03-31T17:02:48Z")
got it at 700, still same condition. [oneadmin@node1 ~]$ ls -al total 28 drwxr-xr-x. 5 oneadmin oneadmin 4096 Mar 31 11:38 . drwxr-xr-x. 43 root root 4096 Mar 31 03:06 … -rw-------. 1 oneadmin oneadmin 525 Mar 31 12:11 .bash\_history -rw-r–r--. 1 oneadmin oneadmin 18 Mar 28 12:48 .bash\_logout -rw-r–r--. 1 oneadmin oneadmin 193 Mar 28 12:48 .bash\_profile -rw-r–r--. 1 oneadmin oneadmin 231 Mar 28 12:48 .bashrc drwxrwxr-x. 3 oneadmin oneadmin 17 Mar 31 10:33 .cache drwxrwxr-x. 3 oneadmin oneadmin 17 Mar 31 10:33 .config drwx------. 2 oneadmin oneadmin 4096 Mar 31 12:10 .ssh [oneadmin@node1 ~]$ ---
**Author:** ![rmm0707](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rmm0707](https://forum.opennebula.io/u/rmm0707)\ **Post date:** [March 31, 2016, 5:31pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/8 "2016-03-31T17:31:59Z")
one thing I should note, the password for oneadmin on the nodes doesn’t work. when I do try to ssh to the node from the server, it asks me for the password, but I can’t log in. Shouldn’t the password for oneadmin@node be the same as the password for oneadmin@server? ---
**Author:** ![knawnd](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/knawnd/32/6119_2.png) [@knawnd](https://forum.opennebula.io/u/knawnd)\ **Post date:** [March 31, 2016, 6:15pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/9 "2016-03-31T18:15:42Z")
Are there any hints in the output of ‘journalctl -eu sshd’ command on the host you are trying to connect to? ---
**Author:** ![rmm0707](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rmm0707](https://forum.opennebula.io/u/rmm0707)\ **Post date:** [March 31, 2016, 6:16pm UTC](https://forum.opennebula.io/t/oneadmin-passwordless-ssh-error/2036/10 "2016-03-31T18:16:49Z")
> [@knawnd](#): > > journalctl -eu sshd output of that command says “no journals found”