ssh Admin Interface

Interactive Connections

To access the local administration console within Dcache

ssh -l admin localhost -p 22223 -c blowfish service 

The default password is

dickerelch

Changing the Password

Next Change the password by this series of commands.

ssh -l admin -c blowfish -p 22223 localhost
(local) admin > cd acm
(acm) admin > create user admin
(acm) admin > set passwd ${newPasswd} ${newPasswd}
(acm) admin > ..
(local) admin > logoff

Using Key based Authentication

To login to the administration console using ssh keys without a password is also possible.

To generate a key pair.

[synge@dev01 synge]$ ssh-keygen -t rsa1 -b 1024

Passwords can be left blank if the key is for automated scripting against D-Cache

The public Key should then be edited to have the ${USER}@${HOST} changed to admin@${HOST}. The ${HOST} variable does not seem important.

[synge@dev01 synge]$ vi .ssh/identity.pub 
[synge@dev01 synge]$ cat .ssh/identity.pub 
1024 35
160440544125444844051808845253846690422815200721695628473265331939871186691345848836701867001143601976239540582793809053701120397700128226755024932908158725776758958889391061118039876867190297129233928174471523326595556738739370728687422769741199357550074602339715400094484076193235386255583160407690410682699
admin@dev01.gridpp.rl.ac.uk

Add the content of the public key to the D-cache ssh servers authorised keys list.

[synge@dev01 synge]$ cat .ssh/identity.pub >> /opt/d-cache/config/authorized_keys

The ssh clients configuration needs editing to include the following values.

[synge@dev01 synge]$ vi .ssh/config
[synge@dev01 synge]$ cat .ssh/config 
Host dev01.gridpp.rl.ac.uk
Port 22223
User admin
IdentityFile .ssh/identity
Protocol 1
Cipher blowfish

Now we should have password free login if ssh agents are used, if not you will be prompted for the ssh pass phrase, and if this is not correct the server will fall back to the admin password..

[synge@dev01 synge]$ ssh admin@dev01.gridpp.rl.ac.uk
The authenticity of host 'dev01.gridpp.rl.ac.uk (130.246.184.124)' can't be established.
RSA1 key fingerprint is 93:7a:52:c0:44:1e:95:9b:02:52:f2:d1:a5:5e:32:4a.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'dev01.gridpp.rl.ac.uk,130.246.184.124' (RSA1) to the list of known hosts.

    dCache Admin (VII) (user=admin)


(local) admin > (local) admin > Connection to dev01.gridpp.rl.ac.uk closed.

This shows that we have 3 public keys that are accepted by D-Cache to bypass the servers own password.

[synge@dev01 synge]$ cat /opt/d-cache/config/authorized_keys
1024 37
97696571718361047988560879388740126981048135413014757020862125228191718722630583619989636917236813018777031525763980460477110373262698412029683565611942639437489103447446339316583244143356605626435373583195964675119319058582552218517027711566859391331402730201225046888130774129684158492054609149327123642491
admin@localhost
1024 35
160440544125444844051808845253846690422815200721695628473265331939871186691345848836701867001143601976239540582793809053701120397700128226755024932908158725776758958889391061118039876867190297129233928174471523326595556738739370728687422769741199357550074602339715400094484076193235386255583160407690410682699
admin@dev01.gridpp.rl.ac.uk
1024 35
131076545565983366643820053831829542195899595805438560295780030532284711896268294637373000509456956496248175225719946552829896824735459333047685205633446092815158895980274776930909468322914510355955844881072163887418630782159812603725576413922906612696369871012772649673479391140555911047843414868525614417131
admin@gppse01.gridpp.rl.ac.uk