[libvirt-users] Issues Connecting to Remote Host Through SSH

[T A]

Hello,

I've been unable to connect to a remote host from within my network using
the following argument.

virsh/virt-manager -c qemu+ssh://***@host:port/system

I've tried libssh & libssh2 as well. Using ssh just prompts me for the host
password indefinitely. When using libssh2 the connection is rejected.

The host computer is using a custom ssh port which I've added to the above
argument. Neither box has an enabled root user.

Remote box

$ cat /etc/debian_version
9.3

$ ssh -V
OpenSSH_7.4p1 Debian-10+deb9u2, OpenSSL 1.0.2l 25 May 2017

$ virsh --version
3.0.0

Host box

$ cat /etc/centos-release
CentOS Linux release 7.4.1708 (Core)

$ ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017

$ virsh --version
3.2.0

Any help is greatly appreciated.

[Daniel P. Berrange]

Post by T A
Hello,
I've been unable to connect to a remote host from within my network using
the following argument.
I've tried libssh & libssh2 as well. Using ssh just prompts me for the host
password indefinitely. When using libssh2 the connection is rejected.

When using the 'ssh://' scheme, libvirt expects that you have configured
an SSH agent and publickeys to provide seemlessly non-interactive auth.

virsh opens a single SSH connection, but virt-manager will open multiple
connections if you have a domain VNC/SPICE console open.

With libssh/libss2 we ought to be able to prompt for the password
interactively IIUC.


Regards,
Daniel

[John Ferlan]

Post by T A
Hello,
I've been unable to connect to a remote host from within my network
using the following argument.
I've tried libssh & libssh2 as well. Using ssh just prompts me for the
host password indefinitely. When using libssh2 the connection is rejected.

There was an issue with virsh corrected by libvirt 3.4.0 where virsh
would continue prompting for password as a result of polkit and
pkttyagent interactions

See:

https://bugzilla.redhat.com/show_bug.cgi?id=1374126

or the upstream commit:

https://libvirt.org/git/?p=libvirt.git;a=commit;h=2453501fc8

Perhaps that's what you're bumping into at least w/r/t the indefinite
password prompting.

John

Post by T A
The host computer is using a custom ssh port which I've added to the
above argument. Neither box has an enabled root user.
Remote box
$ cat /etc/debian_version
9.3
$ ssh -V
OpenSSH_7.4p1 Debian-10+deb9u2, OpenSSL 1.0.2l  25 May 2017
$ virsh --version
3.0.0
Host box
$ cat /etc/centos-release
CentOS Linux release 7.4.1708 (Core)
$ ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017
$ virsh --version
3.2.0
Any help is greatly appreciated.
_______________________________________________
libvirt-users mailing list
https://www.redhat.com/mailman/listinfo/libvirt-users