Not able to access login-gpfs5-01
My XIAS account is in the gpfs5
group, but not able to access login-gpfs5-01
. When I ssh to the relevant test IP, I get an error when I enter my password.
Permission denied (password,publickey).
My XIAS account is in the gpfs5
group, but not able to access login-gpfs5-01
. When I ssh to the relevant test IP, I get an error when I enter my password.
Permission denied (password,publickey).
added Backlog label
changed the description
The solution to this problem lies in the config of target ssh server. It must be configured to support password authentication in our environment. The ssh-piper config just proxies the password authn against the assigned ssh server.
In this case the system config of login-gpfs5-01 needs to be updated to support password authn. In our environment, this requires validating the password against UAB LDAP. The correct config for this authn exists on login004 and needs to be implemented on the gpfs5 login server.
We have this configuration defined for login004. Please work with Ops to implement it.
We need to decide if this should be a build or deploy time update. Given this is a system "personality" akin to our shib and http certs, we should probably use the same sec bucket framework that we use for those elements.
The password auth issue has been resolved in the running login node configuration (note, I don't believe it is in the code yet) https://gitlab.rc.uab.edu/rc/hpc-factory/-/issues/205
added Sprint 25-03 label
removed Backlog label
mentioned in merge request hpc-factory!179
marked this issue as related to #590
added Backlog label and removed Sprint 25-03 label