libvirt users - Jan 2018 - Issues Connecting to Remote Host Through SSH

Hello,

I've been unable to connect to a remote host from within my network using
the following argument.

virsh/virt-manager -c qemu+ssh://user@host:port/system

I've tried libssh & libssh2 as well. Using ssh just prompts me for the
host
password indefinitely. When using libssh2 the connection is rejected.

The host computer is using a custom ssh port which I've added to the above
argument. Neither box has an enabled root user.

Remote box

$ cat /etc/debian_version
9.3

$ ssh -V
OpenSSH_7.4p1 Debian-10+deb9u2, OpenSSL 1.0.2l  25 May 2017

$ virsh --version
3.0.0

Host box

$ cat /etc/centos-release
CentOS Linux release 7.4.1708 (Core)

$ ssh -V
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017

$ virsh --version
3.2.0

Any help is greatly appreciated.

On Tue, Jan 23, 2018 at 03:53:37AM -0600, T A wrote:
> Hello,
> 
> I've been unable to connect to a remote host from within my network
using
> the following argument.
> 
> virsh/virt-manager -c qemu+ssh://user@host:port/system
> 
> I've tried libssh & libssh2 as well. Using ssh just prompts me for
the host
> password indefinitely. When using libssh2 the connection is rejected.
When using the 'ssh://' scheme, libvirt expects that you have configured
an SSH agent and publickeys to provide seemlessly non-interactive auth.

virsh opens a single SSH connection, but virt-manager will open multiple
connections if you have a domain VNC/SPICE console open.

With libssh/libss2 we ought to be able to prompt for the password
interactively IIUC.


Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|

On 01/23/2018 04:53 AM, T A wrote:
> Hello,
> 
> I've been unable to connect to a remote host from within my network
> using the following argument.
> 
> virsh/virt-manager -c qemu+ssh://user@host:port/system
> 
> I've tried libssh & libssh2 as well. Using ssh just prompts me for
the
> host password indefinitely. When using libssh2 the connection is rejected.
There was an issue with virsh corrected by libvirt 3.4.0 where virsh
would continue prompting for password as a result of polkit and
pkttyagent interactions

See:

    https://bugzilla.redhat.com/show_bug.cgi?id=1374126

or the upstream commit:

    https://libvirt.org/git/?p=libvirt.git;a=commit;h=2453501fc8

Perhaps that's what you're bumping into at least w/r/t the indefinite
password prompting.

John
> 
> The host computer is using a custom ssh port which I've added to the
> above argument. Neither box has an enabled root user.
> 
> Remote box
> 
> $ cat /etc/debian_version
> 9.3
> 
> $ ssh -V
> OpenSSH_7.4p1 Debian-10+deb9u2, OpenSSL 1.0.2l  25 May 2017
> 
> $ virsh --version
> 3.0.0
> 
> Host box
> 
> $ cat /etc/centos-release
> CentOS Linux release 7.4.1708 (Core)
> 
> $ ssh -V
> OpenSSH_7.4p1, OpenSSL 1.0.2k-fips  26 Jan 2017
> 
> $ virsh --version
> 3.2.0
> 
> Any help is greatly appreciated.
> 
> 
> 
> _______________________________________________
> libvirt-users mailing list
> libvirt-users@redhat.com
> https://www.redhat.com/mailman/listinfo/libvirt-users
>