To access the local administration console within Dcache
ssh -l admin localhost -p 22223 -c blowfish service
The default password is
dickerelch
Next Change the password by this series of commands.
ssh -l admin -c blowfish -p 22223 localhost (local) admin > cd acm (acm) admin > create user admin (acm) admin > set passwd ${newPasswd} ${newPasswd} (acm) admin > .. (local) admin > logoff
To login to the administration console using ssh keys without a password is also possible.
To generate a key pair.
[synge@dev01 synge]$ ssh-keygen -t rsa1 -b 1024
Passwords can be left blank if the key is for automated scripting against D-Cache
The public Key should then be edited to have the ${USER}@${HOST} changed to admin@${HOST}. The ${HOST} variable does not seem important.
[synge@dev01 synge]$ vi .ssh/identity.pub [synge@dev01 synge]$ cat .ssh/identity.pub 1024 35 160440544125444844051808845253846690422815200721695628473265331939871186691345848836701867001143601976239540582793809053701120397700128226755024932908158725776758958889391061118039876867190297129233928174471523326595556738739370728687422769741199357550074602339715400094484076193235386255583160407690410682699 admin@dev01.gridpp.rl.ac.uk
Add the content of the public key to the D-cache ssh servers authorised keys list.
[synge@dev01 synge]$ cat .ssh/identity.pub >> /opt/d-cache/config/authorized_keys
The ssh clients configuration needs editing to include the following values.
[synge@dev01 synge]$ vi .ssh/config [synge@dev01 synge]$ cat .ssh/config Host dev01.gridpp.rl.ac.uk Port 22223 User admin IdentityFile .ssh/identity Protocol 1 Cipher blowfish
Now we should have password free login if ssh agents are used, if not you will be prompted for the ssh pass phrase, and if this is not correct the server will fall back to the admin password..
[synge@dev01 synge]$ ssh admin@dev01.gridpp.rl.ac.uk The authenticity of host 'dev01.gridpp.rl.ac.uk (130.246.184.124)' can't be established. RSA1 key fingerprint is 93:7a:52:c0:44:1e:95:9b:02:52:f2:d1:a5:5e:32:4a. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'dev01.gridpp.rl.ac.uk,130.246.184.124' (RSA1) to the list of known hosts. dCache Admin (VII) (user=admin) (local) admin > (local) admin > Connection to dev01.gridpp.rl.ac.uk closed.
This shows that we have 3 public keys that are accepted by D-Cache to bypass the servers own password.
[synge@dev01 synge]$ cat /opt/d-cache/config/authorized_keys 1024 37 97696571718361047988560879388740126981048135413014757020862125228191718722630583619989636917236813018777031525763980460477110373262698412029683565611942639437489103447446339316583244143356605626435373583195964675119319058582552218517027711566859391331402730201225046888130774129684158492054609149327123642491 admin@localhost 1024 35 160440544125444844051808845253846690422815200721695628473265331939871186691345848836701867001143601976239540582793809053701120397700128226755024932908158725776758958889391061118039876867190297129233928174471523326595556738739370728687422769741199357550074602339715400094484076193235386255583160407690410682699 admin@dev01.gridpp.rl.ac.uk 1024 35 131076545565983366643820053831829542195899595805438560295780030532284711896268294637373000509456956496248175225719946552829896824735459333047685205633446092815158895980274776930909468322914510355955844881072163887418630782159812603725576413922906612696369871012772649673479391140555911047843414868525614417131 admin@gppse01.gridpp.rl.ac.uk