<div dir="ltr">You probably also copied the private key when you did this, which from your description, is the bit you were missing. I.e., you were going from a hostA(with private key X) -> hostB (pub key X in authorized_keys, no copy of private key X) -> hostC (pub key X in authorized_keys), hostC was denying you access because you did not have private key X that it could authenticate with.<div>
<br></div><div style>Sounds like you probably want to be using ssh auth forwarding see "ssh -A" when using ssh-agent, this way you're not proliferating copies of your private key!</div><div style><br></div>
<div style>
Cheers,</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 17 March 2013 06:47, Chathura M. Sarathchandra Magurawalage <span dir="ltr"><<a href="mailto:77.chathura@gmail.com" target="_blank">77.chathura@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>I solved the issue by copying the rsa public key of the first VM to the second VM. Thought I did not have to do this.</div>
<div><br></div><div>Thanks.</div><div><div class="h5"><div class="gmail_extra"><br>
<div class="gmail_quote">On 16 March 2013 12:34, Pranav <span dir="ltr"><<a href="mailto:pps.pranav@gmail.com" target="_blank">pps.pranav@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">I think you need not exchange key pairs for Cirros image.<br clear="all"><div><div dir="ltr">Regards,<br>Pranav<br></div></div><div><div>
<br><br><div class="gmail_quote">On Sat, Mar 16, 2013 at 4:32 PM, Chathura M. Sarathchandra Magurawalage <span dir="ltr"><<a href="mailto:77.chathura@gmail.com" target="_blank">77.chathura@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Thanks for your reply.</div><div><br></div><div>I have inserted <span style="font-family:arial,sans-serif;font-size:13px">PasswordAuthentication yes to the ssh config file. </span><span style="font-family:arial,sans-serif">All VMs have the same metadata including the ssh public key of the controller. So I cant see why only cirros vms can do this. </span></div>
<div><span style="font-family:arial,sans-serif"><br></span></div><div><span style="font-family:arial,sans-serif">Still does not work.</span></div><div><div><div><br></div><div><br></div><br><div class="gmail_extra">
<div class="gmail_quote">On 16 March 2013 06:24, Aaron Rosen <span dir="ltr"><<a href="mailto:arosen@nicira.com" target="_blank">arosen@nicira.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
I suspect that that host 10.5.5.6 has ssh configured for PasswordAuthentication set to no and you don't have your public key of the host you are on, in the authorized_key file of 10.5.5.6. <div><br>Aaron<br><div><br>
</div>
<div class="gmail_quote"><div><div>On Fri, Mar 15, 2013 at 7:26 PM, Chathura M. Sarathchandra Magurawalage <span dir="ltr"><<a href="mailto:77.chathura@gmail.com" target="_blank">77.chathura@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div>
<div dir="ltr"><div><div>Hello,</div></div><div><br></div><div>I can't ssh from Ubuntu cloud VM to other VM. I get following</div><div><br></div><div><div>ubuntu@master:~$ ssh <a href="mailto:cirros@10.5.5.6" target="_blank">cirros@10.5.5.6</a> -v</div>
<div>OpenSSH_5.9p1 Debian-5ubuntu1, OpenSSL 1.0.1 14 Mar 2012</div><div>debug1: Reading configuration data /etc/ssh/ssh_config</div><div>debug1: /etc/ssh/ssh_config line 19: Applying options for *</div><div>debug1: Connecting to 10.5.5.6 [10.5.5.6] port 22.</div>
<div>debug1: Connection established.</div><div>debug1: identity file /home/ubuntu/.ssh/id_rsa type -1</div><div>debug1: identity file /home/ubuntu/.ssh/id_rsa-cert type -1</div><div>debug1: identity file /home/ubuntu/.ssh/id_dsa type -1</div>
<div>debug1: identity file /home/ubuntu/.ssh/id_dsa-cert type -1</div><div>debug1: identity file /home/ubuntu/.ssh/id_ecdsa type -1</div><div>debug1: identity file /home/ubuntu/.ssh/id_ecdsa-cert type -1</div><div>debug1: Remote protocol version 2.0, remote software version OpenSSH_5.9p1 Debian-5ubuntu1</div>
<div>debug1: match: OpenSSH_5.9p1 Debian-5ubuntu1 pat OpenSSH*</div><div>debug1: Enabling compatibility mode for protocol 2.0</div><div>debug1: Local version string SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1</div><div>debug1: SSH2_MSG_KEXINIT sent</div>
<div>debug1: SSH2_MSG_KEXINIT received</div><div>debug1: kex: server->client aes128-ctr hmac-md5 none</div><div>debug1: kex: client->server aes128-ctr hmac-md5 none</div><div>debug1: sending SSH2_MSG_KEX_ECDH_INIT</div>
<div>debug1: expecting SSH2_MSG_KEX_ECDH_REPLY</div><div>debug1: Server host key: ECDSA 7b:8f:6a:ee:ba:e5:0a:c5:04:01:ca:bd:e5:38:69:55</div><div>debug1: Host '10.5.5.6' is known and matches the ECDSA host key.</div>
<div>debug1: Found key in /home/ubuntu/.ssh/known_hosts:4</div><div>debug1: ssh_ecdsa_verify: signature correct</div><div>debug1: SSH2_MSG_NEWKEYS sent</div><div>debug1: expecting SSH2_MSG_NEWKEYS</div><div>debug1: SSH2_MSG_NEWKEYS received</div>
<div>debug1: Roaming not allowed by server</div><div>debug1: SSH2_MSG_SERVICE_REQUEST sent</div><div>debug1: SSH2_MSG_SERVICE_ACCEPT received</div><div>debug1: Authentications that can continue: publickey</div><div>debug1: Next authentication method: publickey</div>
<div>debug1: Trying private key: /home/ubuntu/.ssh/id_rsa</div><div>debug1: Trying private key: /home/ubuntu/.ssh/id_dsa</div><div>debug1: Trying private key: /home/ubuntu/.ssh/id_ecdsa</div><div>debug1: No more authentication methods to try.</div>
<div>Permission denied (publickey).</div><div><br></div></div><div>But I can ssh from to my Cirros VMs. Also I can ssh from Ubuntu VM to Cirros VM.</div><div><br></div><div>Any Idea?</div><div><br>
</div><div>Thanks.</div>
</div>
<br></div></div>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div>
</blockquote></div><br></div></div></div></div>
<br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div></div></div>
</blockquote></div><br></div></div></div></div>
<br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Cheers,<br>~Blairo
</div>