linux - authentication for SSH into EC2 with new user failing -

-

i working chef on ec2 instances, , created user data script passed in through knife ec2 command, creates new user, copies public key file default ec2-user , sets correct ownership , permissions. 

#!/bin/bash chefuser="$(date +%s | sha256sum | base64 | head -c 32)" useradd $chefuser echo $chefuser 'all=(all) nopasswd:all' | tee -a /etc/sudoers cp -f /home/ec2-user/.ssh/authorized_keys /tmp/ chown $chefuser /tmp/authorized_keys runuser -l $chefuser -c 'mkdir ~/.ssh/' runuser -l $chefuser -c 'mkdir ~/.aws/' runuser -l $chefuser -c 'chmod 700 ~/.ssh/' runuser -l $chefuser -c 'mv -f /tmp/authorized_keys ~/.ssh/' runuser -l $chefuser -c 'chmod 600 ~/.ssh/authorized_keys'

checking ownership , permissions seems return expected after running script:

# ls -l .ssh/authorized_keys -rw-------. 1 nwyzmthimdbmnzljotgxzmu1nde1zme0 root 396 may 29 11:28 .ssh/authorized_keys # stat -c '%a %n' .ssh/ 700 .ssh/ # stat -c '%a %n' .ssh/authorized_keys 600 .ssh/authorized_keys

if ssh new user, key rejected. on new instance, if copy/paste same commands root in terminal (which how script runs according amazon), works fine , can ssh in new user.


Comments

Post a Comment

Popular posts from this blog

Java 3D LWJGL collision -

-
i making 3d java game lwjgl library, , wondering how add collision detection, player not go through models. i using obj models. here objloader class, loads models: package renderengine; import java.io.bufferedreader; import java.io.file; import java.io.filenotfoundexception; import java.io.filereader; import java.util.arraylist; import java.util.list; import models.rawmodel; import org.lwjgl.util.vector.vector2f; import org.lwjgl.util.vector.vector3f; public class objloader { public static rawmodel loadobjmodel(string filename, loader loader){ filereader fr = null; try { fr = new filereader(new file("res/"+filename+".obj")); } catch (filenotfoundexception e) { system.err.println("couldn't load file!"); e.printstacktrace(); } bufferedreader reader = new bufferedreader(fr); string line; list<vector3f> vertices = new arraylist<vector3f...
Read more

spring - SubProtocolWebSocketHandler - No handlers -

-
i have ugly error during deploying spring app on jboss. 18:11:16,025 error [org.apache.catalina.core.containerbase.[jboss.web].[default-host].[/consumer]] (msc service thread 1-7) exception sending context initialized event listener instance of class org.springframework.web.context.contextloaderlistener: org.springframework.context.applicationcontextexception: failed start bean 'subprotocolwebsockethandler'; nested exception java.lang.illegalargumentexception: no handlers @ org.springframework.context.support.defaultlifecycleprocessor.dostart(defaultlifecycleprocessor.java:176) [spring-context-4.1.3.release.jar:4.1.3.release] @ org.springframework.context.support.defaultlifecycleprocessor.access$200(defaultlifecycleprocessor.java:51) [spring-context-4.1.3.release.jar:4.1.3.release] @ org.springframework.context.support.defaultlifecycleprocessor$lifecyclegroup.start(defaultlifecycleprocessor.java:346) [spring-context-4.1.3.release.jar:4.1.3.release] @ org.s...
Read more

methods - python can't use function in submodule -

-
my folder structure this: pythonstuff/ program.py modulea/ __init__.py foo.py bar.py here's code bar.py : def hello(): print("hello, world!") here's code program.py : #!/usr/bin/env python3 modulea import bar bar.hello() i run $ python3 program.py somehow error: file "program.py", line 3, in <module> bar.hello() attributeerror: 'module' object has no attribute 'hello' edit: __init__.py file empty. edit2: after trying realized had bar.py in root directory contained hello() method. bar.py in modulea/ directory empty. add it import os __all__ = [] module in os.listdir(os.path.dirname(__file__)): if module != '__init__.py' , module[-3:] == '.py': __all__.append(module[:-3]) the init .py files required make python treat directories containing packages; done prevent directories common name, such string, unintentionally hiding v...
Read more