[Users] unable to SSH to AWS virtuozzo AMI instance

Kentaro Ebisawa ebiken.g at gmail.com
Tue Nov 3 06:27:17 PST 2015


Hi Siddharth,

 

I have replied below email to the list a few hours ago.

 

I recommend subscribing to the list if you want to make sure you receive reply.

When I reply normally, my mail client only send to the list. (Maybe due to “Reply-To:” header.)

 

Thanks,

--

Kentaro Ebisawa <ebiken.g at gmail.com>

 

From: Kentaro Ebisawa [mailto:ebiken.g at gmail.com] 
Sent: Tuesday, November 3, 2015 6:17 PM
To: OpenVZ users <users at openvz.org>
Subject: RE: [Users] unable to SSH to AWS virtuozzo AMI instance

 

Hi Siddharth,

 

I have tried using below command from my local ubuntu14.04 and was able to login.

(Of course to my VM)

 

ssh -v -i  vz-key.pem ec2user at 52.xx.xx.xx <mailto:ec2user at 52.xx.xx.xx> 

 

There error you are seeing seems like the ones when you have wrong certificate. (*.pem file), user name or IP address.

 

Please double check you are using the certificate you have generated while creating Virtuozzo instance on EC2.

Also, IP address of EC2 instance changes every time you restart it.

So please also double check you are accessing to the current IP address of the instance.

 

FYI: 

 

/// Log when I tried and success ///

… snip …

debug1: Unspecified GSS failure.  Minor code may provide more information

No Kerberos credentials available

 

debug1: Next authentication method: publickey

debug1: Trying private key: vz-key.pem

debug1: key_parse_private2: missing begin marker

debug1: read PEM private key done: type RSA

debug1: Authentication succeeded (publickey).

Authenticated to 52.xx.xx.xx ([52.xx.xx.xx]:22).

debug1: channel 0: new [client-session]

debug1: Requesting no-more-sessions at openssh.com <mailto:no-more-sessions at openssh.com> 

debug1: Entering interactive session.

debug1: Sending environment.

… snip …

 

/// Log when I accessed your instance and failed (similar output from yours) ///

… snip …

debug1: Unspecified GSS failure.  Minor code may provide more information

No Kerberos credentials available

 

debug1: Next authentication method: publickey

debug1: Trying private key: vz-key.pem

debug1: key_parse_private2: missing begin marker

debug1: read PEM private key done: type RSA

debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic

debug1: No more authentication methods to try.

Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

 

Thanks,

--

Kentaro Ebisawa <ebiken.g at gmail.com <mailto:ebiken.g at gmail.com> >

 

 

From: users-bounces at openvz.org [mailto:users-bounces at openvz.org] On Behalf Of Siddharth Deshpande
Sent: Tuesday, November 3, 2015 10:27 PM
To: users at openvz.org
Subject: [Users] unable to SSH to AWS virtuozzo AMI instance

 

Hi,

 

I'm trying out the new AWS AMI image for virtuozzo 7 as per the instructions at http://www.slideshare.net/kentaroebisawa/quick-start-guide-using-virtuozzo-7-on-aws-ec2

.

 

I created a t2.micro instance, followed all the instructions up to generating a key-pair and am trying to SSH to it, but i keep getting this error:

 

$ ssh -v -i ".ssh/aws_trial.pem" ec2user at 52.11.51.72 <mailto:ec2user at 52.11.51.72> 

 

OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014

debug1: Reading configuration data /etc/ssh/ssh_config

debug1: /etc/ssh/ssh_config line 19: Applying options for *

debug1: Connecting to 52.11.51.72 [52.11.51.72] port 22.

debug1: Connection established.

debug1: identity file .ssh/aws_trial.pem type -1

debug1: identity file .ssh/aws_trial.pem-cert type -1

debug1: Enabling compatibility mode for protocol 2.0

debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3

debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1

debug1: match: OpenSSH_6.6.1 pat OpenSSH_6.6.1* compat 0x04000000

debug1: SSH2_MSG_KEXINIT sent

debug1: SSH2_MSG_KEXINIT received

debug1: kex: server->client aes128-ctr hmac-md5-etm at openssh.com <mailto:hmac-md5-etm at openssh.com>  none

debug1: kex: client->server aes128-ctr hmac-md5-etm at openssh.com <mailto:hmac-md5-etm at openssh.com>  none

debug1: sending SSH2_MSG_KEX_ECDH_INIT

debug1: expecting SSH2_MSG_KEX_ECDH_REPLY

debug1: Server host key: ECDSA 30:77:32:db:2f:74:31:f8:ad:b2:19:3a:e6:16:23:b9

debug1: Host '52.11.51.72' is known and matches the ECDSA host key.

debug1: Found key in <OUTPUT SNIPPED>

debug1: ssh_ecdsa_verify: signature correct

debug1: SSH2_MSG_NEWKEYS sent

debug1: expecting SSH2_MSG_NEWKEYS

debug1: SSH2_MSG_NEWKEYS received

debug1: Roaming not allowed by server

debug1: SSH2_MSG_SERVICE_REQUEST sent

debug1: SSH2_MSG_SERVICE_ACCEPT received

debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic

debug1: Next authentication method: gssapi-keyex

debug1: No valid Key exchange context

debug1: Next authentication method: gssapi-with-mic

debug1: Unspecified GSS failure.  Minor code may provide more information

No Kerberos credentials available

 

debug1: Unspecified GSS failure.  Minor code may provide more information

No Kerberos credentials available

 

debug1: Unspecified GSS failure.  Minor code may provide more information

 

 

debug1: Unspecified GSS failure.  Minor code may provide more information

No Kerberos credentials available

 

debug1: Next authentication method: publickey

debug1: Offering RSA public key: <OUTPUT SNIPPED>

debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic

debug1: Trying private key: .ssh/aws_trial.pem

debug1: key_parse_private2: missing begin marker

debug1: read PEM private key done: type RSA

debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic

debug1: No more authentication methods to try.

Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

 

 

Posting to this list as per instructions from Kentaro Ebisawa <https://www.facebook.com/kentaro.ebisawa?fref=ufi> 

.

 

Please let me know if you need any more/specific information.

 

TIA,

Siddharth Deshpande

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openvz.org/pipermail/users/attachments/20151103/6d05a1e6/attachment-0001.html>


More information about the Users mailing list