RSYNC Help needed

bentoms
Release Candidate Programs Tester

Hi All.

We've recently rebuilt our Master Casper server to 10.8.2.. the Replica's are on 10.7.5.

I've tried the below to recreate the SSH public keys on the clients so we can re-do the RSYNC connections unprompted when running a shell script via a launch daemon.

However I keep getting the error "Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive)." when running as root.

If I run as any other user, I am prompted for a password.. so i'm guessing it's not working..

Maybe something has been left on the replica's referencing the old master?

Any ideas?

1. Login to ReplicaServer as Administrator. 2. Click “Go” in the menu bar & select “Utilities.” 3. Once in the Utilities, open Terminal. 4. Enter the following commands in order on (each is on a single line). Press Enter after each command: a. sudo su b. Type Administrator password when prompted, press Enter. c. sudo ssh-keygen -t rsa d. “Enter file in which to save the key (/var/root/.ssh/id_rsa):” <press enter> e. “Enter passphrase (empty for no passphrase):” <press enter> f. “Enter same passphrase again:” <press enter> g. cd /var/root/.ssh/ h. cat id_rsa.pub i. Type Administrator password when prompted, press Enter. j. Copy the returned result. 5. Click “Terminal” in the menubar. 6. Click “Shell” 7. Click “New Window” 8. Click “Basic” 9. Enter the following commands in order on (each is on a single line). Press Enter after each command: a. ssh Administrator@masterserver.fqdn b. Type “yes” a. Type Administrator password when prompted, press Enter. b. cd ~/.ssh/ c. sudo nano authorized_keys2 d. Type Administrator password when prompted, press Enter. e. Copy the text returned from step 4j into a new line. f. Press CTRL + X g. Press Y h. Press Enter. i. sudo su j. cp -r /Users/Administrator/.ssh/ /Users/casperadmin/.ssh/ k. Type exit l. Type exit 10. Select “Terminal” from the menubar. 11. Then click “Quit Terminal”
1 ACCEPTED SOLUTION

bentoms
Release Candidate Programs Tester

Hi all,

Found the solution, it was a 10.8 change..

http://macmule.com/2012/10/18/error-permission-denied-publickeygssapi-keyexgssapi-with-mickeyboard-i.../

Basically, ~/.ssh/authorized_keys2 is ignored by default.. so you can either edit /etc/sshd_config or rename the file ~/.ssh/authorized_keys

(Yep a 2 wasted about 2 days of work!! )

Thanks for the assistance!

View solution in original post

2 REPLIES 2

radamr
New Contributor

Have you fixed the privileges ?

# chmod 600 ~/.ssh/authorized_keys2

bentoms
Release Candidate Programs Tester

Hi all,

Found the solution, it was a 10.8 change..

http://macmule.com/2012/10/18/error-permission-denied-publickeygssapi-keyexgssapi-with-mickeyboard-i.../

Basically, ~/.ssh/authorized_keys2 is ignored by default.. so you can either edit /etc/sshd_config or rename the file ~/.ssh/authorized_keys

(Yep a 2 wasted about 2 days of work!! )

Thanks for the assistance!