Add ssh key of gislab user to gislab client

[lfurtkevicova]

Currently it is not possible to log in to the gislab client from the server by ssh.

[landam]

Confirmed, currently I am bypassing it by special user after-add hook.

[imincik]

I don't understand this issue. Can you explain this issue in detail ?

[landam]

You cannot connect from the server to the running client:

ssh gislab@c50

says 'Error: Permission denied (publickey)'.

[imincik]

It is true, only SSH keys authentication is allowed. Do you propose creating some password-less SSH keys on user account creation ?

[landam]

Yes, the gislab user should be definitely able to access running clients. Something like

mkdir /mnt/home/${GISLAB_USER}/.ssh
cp /mnt/home/gislab/.ssh/id_dsa.pub /mnt/home/${GISLAB_USER}/.ssh/authorized_keys
chown ${GISLAB_USER}:gislabusers /mnt/home/${GISLAB_USER}/.ssh/ -R

[imincik]

'gislab' user account doesn't contain private or public SSH key.

But it contains public key used for provisioning user (ubuntu or vagrant). So adding this key to ssh-agent ($ ssh-add ) and logging with agent forwarding enabled ($ ssh -A) should allow logging to server and jumping to clients as well.

[imincik]

Run "$ vagrant ssh-config" to get SSH connection information used by Vagrant which contains also path to SSH key used by Vagrant

[landam]

I don't understand, there is no vagrant used/installed on GIS.lab unit, right?

[imincik]

@landam, I meant that every user account used for GIS.lab installation ('vagrant' if using Vagrant, 'ubuntu' for other installations) contains public SSH key. For GIS.lab Unit, it is the one which is specified during basic OS ISO image creation. This key is copied during installation also to 'gislab' user account (see: /storage/home/gislab/.ssh/authorized_keys). Therefore, you can use this SSH key for connection. See ssh-agent for more information how to forward SSH keys.

[landam]

OK, but I still think that gislab user should be able to connect from the server to the clients out of box (without any extra effort).

ssh gislab@c50