SSH doesn't allow non-root connections before full boot

Bug #1888569 reported by George Melikov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
manila-image-elements
Fix Released
Medium
George Melikov

Bug Description

During instance boot SSH may start before actual full boot, and non-root users may get such error and disconnects as wrong auth:

"System is booting up. See pam_nologin(8)"
Connection closed by XXX port 22

Manila-share code doesn't retry auth errors, so such instance will transition share state to ERROR.

Proposed fix: https://review.opendev.org/#/c/741953/

Changed in manila-image-elements:
assignee: nobody → George Melikov (gmelikov)
Changed in manila-image-elements:
assignee: George Melikov (gmelikov) → Tom Barron (tpb)
status: New → In Progress
Tom Barron (tpb)
Changed in manila-image-elements:
importance: Undecided → Medium
Changed in manila-image-elements:
assignee: Tom Barron (tpb) → George Melikov (gmelikov)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila-image-elements (master)

Reviewed: https://review.opendev.org/741953
Committed: https://git.openstack.org/cgit/openstack/manila-image-elements/commit/?id=bc5e37ffd9bcb1f67b88b1933cd7e503d8c6484a
Submitter: Zuul
Branch: master

commit bc5e37ffd9bcb1f67b88b1933cd7e503d8c6484a
Author: George Melikov <email address hidden>
Date: Fri Jul 17 16:59:04 2020 +0300

    Start ssh only after full boot

    Before this change instance may close ssh connection on boot with message:

    "System is booting up. See pam_nologin(8)"
    Connection closed by XXX port 22

    , so manila think that password/private key is wrong and fails share creation.

    Closes-bug: #1888569
    Change-Id: I032e77e2f16e1d445c72eb3abd99a09c413dabe5
    Signed-off-by: George Melikov <email address hidden>

Changed in manila-image-elements:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.