[Systems] translate.sl.o is down

[Sebastian Silva]

I had doubts yesterday about a setting:

"UsePAM no"

Since I had both
ChallengeResponseAuthentication no
PasswordAuthentication no

I figured it wasn't needed but tried it anyway. It worked for me.
I tried reverting it back to:

"UsePAM yes"
This allowed tch to login.

I tried logging in without a ssh key and just got rejected, no password
challenge issued at all, which is the desired behaviour.

So I guess issue fixed.
I'll leave it to the ssh guardian spirits to figure out what exactly
happened.

Regards,
Sebastian


El 04/03/15 a las 13:15, Martin Abente Lahaye escibió:
> Hey Sebastian,
>
> No, i did not loose it, I can still log into sunjammer, so it is
> definitely just something wrong with translate.sl.o.
>
> Was ssh disabled or something there?
>
> Gracias!
> Tincho.
>
>
>
> On Wed, Mar 4, 2015 at 3:07 PM, Sebastian Silva
> <sebastian at somosazucar.org <mailto:sebastian at somosazucar.org>> wrote:
>
>     Please send an updated ssh public key. Did you loose your secret keys?
>     There are 2 authorized keys in your account. Shall I revoke them?
>
>     Also, can you prove that you are you?
>
>     Regards,
>     Sebastian
>
>     El 04/03/15 a las 12:30, Martin Abente Lahaye escibió:
>>     Thanks everyone for the quick response! I have one more request,
>>     can I be given ssh access back?
>>
>>         [tch at tch ~]$ ssh tch at translate.sugarlabs.org
>>         <mailto:tch at translate.sugarlabs.org> 
>>         Permission denied (publickey).
>>
>>
>>
>>     On Wed, Mar 4, 2015 at 2:08 AM, Sebastian Silva
>>     <sebastian at somosazucar.org <mailto:sebastian at somosazucar.org>> wrote:
>>
>>         Hi,
>>
>>         I did as Stefan requested; removed password for root account and
>>         disallowed ssh login with password (only ssh should be allowed).
>>
>>         I would appreciate if you would give me access to Justice
>>         with the
>>         attached SSH key.
>>         I will then proceed to try to verify Bernie's theory.
>>
>>         I didn't get much info from apache wsgi process core dump anyway.
>>
>>         Regards,
>>         Sebastian
>>
>>         El 03/03/15 a las 23:50, Bernie Innocenti escibió:
>>         > Thank you guys for the quick fix. Dogi, could you give
>>         Sebastian root
>>         > access to Justice? I have a theory for what caused the
>>         outage: perhaps
>>         > the old pootle VM accidentally started on the same IP? We
>>         should just
>>         > delete the old instance, since it's outdated and all the
>>         projects are
>>         > still pointing at Gitorious, which is no longer used.
>>         >
>>         > I'm currently visiting my family in Italy AND on medical
>>         leave (I should
>>         > minimize typing after arm surgery). Please keep watching
>>         over the SL
>>         > infra while I'm afk!
>>         >
>>         > On 03/03/2015 04:09 PM, Stefan Unterhauser wrote:
>>         >> Hi all,
>>         >>
>>         >> not only newpootle, all justice.sl.o had a hiccup yesterday
>>         >> ->
>>         http://munin.treehouse.su/gar/DOMs/justice.treehouse.su/index.html
>>         >> => so I rebooted it
>>         >>
>>         >> think it was due monthly cron jobs
>>         >>
>>         >>
>>         >> anyway was then checking on every VM:
>>         >> justice:~# virsh list
>>         >>  Id Name                 State
>>         >> ----------------------------------
>>         >>   1 pootle               running
>>         >>   2 pye-zatoichi         running
>>         >>   3 library              running
>>         >>   4 lightwave            running
>>         >>   5 amnesia              running
>>         >>   6 jita                 running
>>         >>   7 mothership           running
>>         >>
>>         >> ... if they would come back after reboot
>>         >> only newpootle wants a password when we logged through
>>         virsh (locally)
>>         >> as root
>>         >> root at justice$ virsh console pootle
>>         >>
>>         >> can somebody please fix this on "newpootle"
>>         >> * prohibit remote password root logins
>>         >> * make local root access password-less
>>         >>
>>         >>
>>         >> xo
>>         >> dogi
>>         >>
>>         >> On Mon, Mar 2, 2015 at 4:25 PM, Martin Abente Lahaye
>>         <tch at sugarlabs.org <mailto:tch at sugarlabs.org>
>>         >> <mailto:tch at sugarlabs.org <mailto:tch at sugarlabs.org>>> wrote:
>>         >>
>>         >>
>>         >>     On Mon, Mar 2, 2015 at 6:08 PM, Sebastian Silva
>>         >>     <sebastian at somosazucar.org
>>         <mailto:sebastian at somosazucar.org>
>>         <mailto:sebastian at somosazucar.org
>>         <mailto:sebastian at somosazucar.org>>> wrote:
>>         >>
>>         >>         I'll check it out.
>>         >>
>>         >>
>>         >>     Thanks!
>>         >>
>>         >>
>>         >>         please cc: systems@ when it relates to SL
>>         infrastructure
>>         >>
>>         >>
>>         >>     will do!
>>         >>
>>         >>
>>         >>         Regards,
>>         >>         Sebastian
>>         >>
>>         >>         El 02/03/15 a las 15:29, Martin Abente Lahaye escibió:
>>         >>         > Hello Bernie and Sabastian,
>>         >>         >
>>         >>         > It seems that the machine hosting our new Pootle
>>         instance is down. I
>>         >>         > can't even ping to the machine.
>>         >>         >
>>         >>         > Translators are working hard to update sugar and
>>         sugar-toolkit strings
>>         >>         > for this friday's release, so it would be sad to
>>         interrupt their
>>         >>         > effrots in this way.
>>         >>         >
>>         >>         > Would be great if we could check what is going
>>         on and bring the server
>>         >>         > up again!
>>         >>         >
>>         >>         > Thanks,
>>         >>         > tch.
>>         >>         >
>>         >>         >
>>         >>
>>         >>
>>         >>
>>         >>     _______________________________________________
>>         >>     Systems mailing list
>>         >>     Systems at lists.sugarlabs.org
>>         <mailto:Systems at lists.sugarlabs.org>
>>         <mailto:Systems at lists.sugarlabs.org
>>         <mailto:Systems at lists.sugarlabs.org>>
>>         >>     http://lists.sugarlabs.org/listinfo/systems
>>         >>
>>         >>
>>         >>
>>         >>
>>         >> _______________________________________________
>>         >> Systems mailing list
>>         >> Systems at lists.sugarlabs.org
>>         <mailto:Systems at lists.sugarlabs.org>
>>         >> http://lists.sugarlabs.org/listinfo/systems
>>         >>
>>         >
>>
>>         _______________________________________________
>>         Systems mailing list
>>         Systems at lists.sugarlabs.org <mailto:Systems at lists.sugarlabs.org>
>>         http://lists.sugarlabs.org/listinfo/systems
>>
>>
>
>
>     _______________________________________________
>     Systems mailing list
>     Systems at lists.sugarlabs.org <mailto:Systems at lists.sugarlabs.org>
>     http://lists.sugarlabs.org/listinfo/systems
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sugarlabs.org/private/systems/attachments/20150304/50e6111c/attachment.html>