<div dir="ltr">Why are you focusing on authentication issues when it seems you have either a sshd config issue or a connectivity problem?<div><br></div><div>Indeed your ssh handshake is stopping quite early - see below:</div><div><br></div><div><div>debug1: Connecting to 192.168.1.250 [192.168.1.250] port 22.<br></div><div>debug1: Connection established.</div><div>debug1: Enabling compatibility mode for protocol 2.0<br></div><div>debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2</div><div>debug1: Remote protocol version 2.0, remote software version OpenSSH_5.6</div><div>debug1: match: OpenSSH_5.6 pat OpenSSH_5* compat 0x0c000000</div><div>debug1: SSH2_MSG_KEXINIT sent</div><div>debug1: SSH2_MSG_KEXINIT received</div><div>debug1: kex: server->client aes128-ctr hmac-sha1 none</div><div>debug1: kex: client->server aes128-ctr hmac-sha1 none</div><div>debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<7680<8192) sent</div><div>debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP</div><div>debug1: SSH2_MSG_KEX_DH_GEX_INIT sent</div><div>debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY</div><div>debug1: Server host key: <MEH></div><div>debug1: Host '192.168.1.250' is known and matches the RSA host key.</div><div>debug1: Found key in /home/salvatore/.ssh/known_hosts:21</div><div>debug1: ssh_rsa_verify: signature correct</div><div>debug1: SSH2_MSG_NEWKEYS sent</div><div>debug1: expecting SSH2_MSG_NEWKEYS</div><div>debug1: SSH2_MSG_NEWKEYS received</div><div>debug1: Roaming not allowed by server</div><div>debug1: SSH2_MSG_SERVICE_REQUEST sent</div><div>debug1: SSH2_MSG_SERVICE_ACCEPT received</div><div>debug1: Authentications that can continue: publickey,keyboard-interactive</div><div>debug1: Next authentication method: publickey</div><div>debug1: Offering RSA public key: /home/salvatore/.ssh/id_rsa</div><div>debug1: Authentications that can continue: publickey,keyboard-interactive</div><div><br></div></div><div>Your instance seem to not be receiving back SSH2_MSG_KEXINIT.</div><div>Note: this question is more suitable for <a href="http://ask.openstack.org">ask.openstack.org</a> than for this ML imho.</div><div><br></div><div>Salvatore</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 30 July 2015 at 10:14, <span dir="ltr"><<a href="mailto:aishwarya.adyanthaya@accenture.com" target="_blank">aishwarya.adyanthaya@accenture.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Hi Neil,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I did the same as you have suggested. I have created an instance A and generated a private_key, giving it 600 permission. Using the key I launched the instance B but when I ssh from the instance A after a while it reads:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Read from socket failed: Connection timed out<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I even tried with ssh –v hostname to test on one the machine outside openstack and the instance.<u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">root@new:/home/ubuntu# ssh -v new<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: Reading configuration data /etc/ssh/ssh_config<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: /etc/ssh/ssh_config line 19: Applying options for *<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: Connecting to new [10.x.x.x] port 22.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: Connection established.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: permanently_set_uid: 0/0<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_rsa type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_rsa-cert type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_dsa type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_dsa-cert type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_ecdsa type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_ecdsa-cert type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_ed25519 type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: identity file /root/.ssh/id_ed25519-cert type -1<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: Enabling compatibility mode for protocol 2.0<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 pat OpenSSH_6.6.1* compat 0x04000000<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">debug1: SSH2_MSG_KEXINIT sent<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal">Read from socket failed: Connection timed out<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">So this is what I’m getting again.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you,<u></u><u></u></p>
<p class="MsoNormal">Aishwarya<u></u><u></u></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Neil Jerram [mailto:<a href="mailto:Neil.Jerram@metaswitch.com" target="_blank">Neil.Jerram@metaswitch.com</a>]
<br>
<b>Sent:</b> Thursday, July 30, 2015 1:38 PM<br>
<b>To:</b> Adyanthaya, Aishwarya; <a href="mailto:openstack-operators@lists.openstack.org" target="_blank">openstack-operators@lists.openstack.org</a><br>
<b>Subject:</b> Re: [Openstack-operators] ssh inside instance<u></u><u></u></span></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d">Hi Aishwarya, <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d">The basic requirement here is that anyone - which really means a combination of a computer or instance, plus a user on that computer/instance - needs to have the private key that matches
the public key that is installed on the target instance. <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d">You've asked about logging in from your first instance - let's call it A - so you need to save the private key in a file on A - let's call it private_key - and give it 600 permissions:<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"> chmod 600 private_key<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d">Then you can use this key with SSH like this:<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"> ssh -i private_key USER@OTHER-INSTANCE<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d">Hope that helps. <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d">Regards, <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"> Neil <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
<table border="0" cellpadding="0" width="100%" style="width:100.0%;background:white;border-spacing:0px">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt;font-size:initial;text-align:initial">
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:
</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><a href="mailto:aishwarya.adyanthaya@accenture.com" target="_blank">aishwarya.adyanthaya@accenture.com</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Sent:
</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Thursday, 30 July 2015 05:24<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">To:
</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""><a href="mailto:openstack-operators@lists.openstack.org" target="_blank">openstack-operators@lists.openstack.org</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Subject:
</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">[Openstack-operators] ssh inside instance<u></u><u></u></span></p>
</div>
</div>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<div>
<div>
<p class="MsoNormal">Hi,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I’ve launched two instances from my openstack dashboard. Firstly I created instance one, where I generated a key through the ssh-keygen command, pasting the public key contents to import key in the access and security. Using this key I
launched second instance.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I want to be able to ssh the second instance from my first instance. Could someone tell me how to work it out?<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Thank you,<u></u><u></u></p>
<p class="MsoNormal">Aishwarya Adyanthaya<u></u><u></u></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><br>
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by
you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of
internal compliance with Accenture policy. <br>
______________________________________________________________________________________<br>
<br>
<a href="http://www.accenture.com" target="_blank">www.accenture.com</a><br>
</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
<br>
<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u> <u></u></span></p>
</div></div></div>
</div>
<br>_______________________________________________<br>
OpenStack-operators mailing list<br>
<a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
<br></blockquote></div><br></div>