# POC: distributing SSH keys asks for oneadmin password

**URL:** <https://forum.opennebula.io/t/poc-distributing-ssh-keys-asks-for-oneadmin-password/14582>\
**Category:** Installation & Configuration\
**Created:** [September 22, 2026, 12:54pm UTC](https://forum.opennebula.io/t/poc-distributing-ssh-keys-asks-for-oneadmin-password/14582 "2026-09-22T12:54:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gabe](https://avatars.discourse-cdn.com/v4/letter/g/5daacb/32.png) [@Gabe](https://forum.opennebula.io/u/Gabe)\
**Post date:** [September 22, 2026, 12:54pm UTC](https://forum.opennebula.io/t/poc-distributing-ssh-keys-asks-for-oneadmin-password/14582/1 "2026-09-22T12:54:39Z")

</div>

Doing a POC and using this manual to install the community edition: [KVM Node Installation |](https://docs.opennebula.io/7.4/software/installation_process/cluster_installation/kvm_node_installation/)  
I installed the frontend node using RHEL 10 minimal install. Then I have three servers that will be the KVM nodes which I also installed minimal RHEL 10 on. Installed the epel repo, did the opennebula-node-kvm install. On the frontend I follow step 4 “Configure passwordless SSH”. When trying the ssh-copy-id to the nodes, I get asked for the oneadmin password of the node. But I don’t know what that password is. Can’t remember setting that password. The user is present though on all the systems and has the exact same userid as well.

Do I just set a password for the oneadmin user per node?

(To continue instead of waiting for a response, I already did, just wondering if I’m breaking anything with this that will give me issue in the future)

---

<div class="post-metadata">

**Author:** ![mkutouski](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/mkutouski/32/7923_2.png) [@mkutouski](https://forum.opennebula.io/u/mkutouski)\
**Post date:** [September 24, 2026, 11:48am UTC](https://forum.opennebula.io/t/poc-distributing-ssh-keys-asks-for-oneadmin-password/14582/2 "2026-09-24T11:48:19Z")

</div>

The [document](https://docs.opennebula.io/7.4/software/installation_process/cluster_installation/kvm_node_installation/#step-4-configure-passwordless-ssh) you are referring to also mentions the following:

> To enable passwordless connections you must distribute the public key of the `oneadmin` user from the Front-end to `/var/lib/one/.ssh/authorized_keys` on all hypervisor nodes. There are many methods to achieve the distribution of the SSH keys. Ultimately the administrator should choose a method; the recommendation is to use a configuration management system (e.g., Ansible or Puppet). In this guide, we are going to manually use SSH tools.

If you have done such step then make sure the file `/var/lib/one/.ssh/authorized_keys` on hypervisor nodes (HVs) has proper ownership and permissions.  
You can increase `ssh` command output verbosity with `-vvv` flag to debug the issue with passwordless access:

```auto
[oneadmin@FE]# ssh -vvv <user>@<HV>

```

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex031/uploads/opennebula/original/2X/1/14d66f1130b9cd292905f575da9b68a9f574dd03.png) [@system](https://forum.opennebula.io/u/system)\
**Post date:** [October 24, 2026, 11:48am UTC](https://forum.opennebula.io/t/poc-distributing-ssh-keys-asks-for-oneadmin-password/14582/3 "2026-10-24T11:48:44Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.