[CONTROLLER-1369] Netconf connector: org.apache.sshd.core - 0.14.0 fails authentication Created: 12/Jun/15  Updated: 19/Oct/17  Resolved: 12/Jun/15

Status: Resolved
Project: controller
Component/s: netconf
Affects Version/s: Beryllium
Fix Version/s: None

Type: Bug
Reporter: Vratko Polak Assignee: Unassigned
Resolution: Cannot Reproduce Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Operating System: All
Platform: All

External issue ID: 3705

 Description   

This bug disables controller-config connection, so every attempt to access ODL configuration via restconf fails.

Somewhere during 2015-06-12 morning (UTC), lithium snapshot builds changed their behavior.
When installing odl-netconf-connector-all feature, there is a common segment in karaf.log like this:

2015-06-12 12:00:47,938 | INFO | NioProcessor-2 | ClientSessionImpl | 119 - org.apache.sshd.core - 0.14.0 | Client session created
2015-06-12 12:00:47,938 | INFO | o-group-thread-1 | ServerSession | 119 - org.apache.sshd.core - 0.14.0 | Server session created from /127.0.0.1:58412
2015-06-12 12:00:47,953 | INFO | NioProcessor-2 | ClientSessionImpl | 119 - org.apache.sshd.core - 0.14.0 | Start flagging packets as pending until key exchange is done
2015-06-12 12:00:47,956 | INFO | NioProcessor-2 | ClientSessionImpl | 119 - org.apache.sshd.core - 0.14.0 | Server version string: SSH-2.0-SSHD-CORE-0.14.0
2015-06-12 12:00:47,958 | INFO | o-group-thread-2 | PEMGeneratorHostKeyProvider | 119 - org.apache.sshd.core - 0.14.0 | Generating host key...

Then, in earlier builds, the this segment follows (note org.apache.sshd.core version 0.12.0), and controller-config connection works:

2015-06-12 08:46:07,532 | INFO | 7]-nio2-thread-1 | ServerSession | 28 - org.apache.sshd.core - 0.12.0 | Server session created from /0:0:0:0:0:0:0:1:48941
2015-06-12 08:46:07,534 | INFO | 7]-nio2-thread-1 | SimpleGeneratorHostKeyProvider | 28 - org.apache.sshd.core - 0.12.0 | Generating host key...
2015-06-12 08:46:07,545 | INFO | 7]nio2-thread-2 | ServerSession | 28 - org.apache.sshd.core - 0.12.0 | Kex: server>client aes128-ctr hmac-sha1 none
2015-06-12 08:46:07,545 | INFO | 7]nio2-thread-2 | ServerSession | 28 - org.apache.sshd.core - 0.12.0 | Kex: client>server aes128-ctr hmac-sha1 none
2015-06-12 08:46:07,654 | INFO | 7]-nio2-thread-8 | ServerUserAuthService | 28 - org.apache.sshd.core - 0.12.0 | Session karaf@/0:0:0:0:0:0:0:1:48941 authenticated

But on later builds, org.apache.sshd.core version in the following segment is 0.14.0 and controller-config connection attempts fail:

2015-06-12 12:00:53,995 | WARN | NioProcessor-2 | AcceptAllServerKeyVerifier | 119 - org.apache.sshd.core - 0.14.0 | Server at /127.0.0.1:1830 presented unverified RSA key: c9:07:d1:c4:73:3d:54:95:bb:06:16:96:9a:d1:90:29
2015-06-12 12:00:54,004 | INFO | NioProcessor-2 | ClientSessionImpl | 119 - org.apache.sshd.core - 0.14.0 | Dequeing pending packets
2015-06-12 12:00:54,008 | INFO | NioProcessor-2 | ClientUserAuthServiceNew | 119 - org.apache.sshd.core - 0.14.0 | Received SSH_MSG_USERAUTH_FAILURE
2015-06-12 12:00:54,011 | INFO | NioProcessor-2 | UserAuthKeyboardInteractive | 119 - org.apache.sshd.core - 0.14.0 | Received Password authentication en-US
2015-06-12 12:00:54,012 | WARN | o-group-thread-7 | AuthProviderTracker | 240 - org.opendaylight.controller.netconf-ssh - 0.4.0.SNAPSHOT | AuthProvider is missing, failing authentication
2015-06-12 12:00:54,012 | INFO | NioProcessor-2 | ClientUserAuthServiceNew | 119 - org.apache.sshd.core - 0.14.0 | Received SSH_MSG_USERAUTH_FAILURE
2015-06-12 12:00:54,013 | INFO | NioProcessor-2 | UserAuthKeyboardInteractive | 119 - org.apache.sshd.core - 0.14.0 | Received Password authentication en-US
2015-06-12 12:00:54,014 | INFO | NioProcessor-2 | UserAuthKeyboardInteractive | 119 - org.apache.sshd.core - 0.14.0 | Received Password authentication en-US
2015-06-12 12:00:54,015 | INFO | NioProcessor-2 | UserAuthKeyboardInteractive | 119 - org.apache.sshd.core - 0.14.0 | Received Password authentication en-US
2015-06-12 12:00:54,017 | WARN | o-group-thread-7 | AuthProviderTracker | 240 - org.opendaylight.controller.netconf-ssh - 0.4.0.SNAPSHOT | AuthProvider is missing, failing authentication
2015-06-12 12:00:54,017 | INFO | NioProcessor-2 | ClientUserAuthServiceNew | 119 - org.apache.sshd.core - 0.14.0 | Received SSH_MSG_USERAUTH_FAILURE
2015-06-12 12:00:54,017 | WARN | NioProcessor-2 | AsyncSshHandler | 116 - org.opendaylight.controller.netconf-netty-util - 0.4.0.SNAPSHOT | Unable to setup SSH connection on channel: [id: 0x2bd18ad1]
java.lang.IllegalStateException: Authentication failed

 Comments   
Comment by Vratko Polak [ 12/Jun/15 ]

Hold on, looks like I was running build from master (and not stable/lithium) by mistake.

Comment by Vratko Polak [ 12/Jun/15 ]

Yeah, I was using Lithium snapshot build, but post-Lithium csit job. Marking as INVALID for now, may be reopened if confirmed on post-Lithium builds.

Generated at Wed Feb 07 19:55:22 UTC 2024 using Jira 8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d.