Topic: affa not working

[chrislaurie]

I've configured affa as described in the twiki, but it fails to connect. I get this in the logs:

Fri Jul 17 17:07:28[26632]: Checking SSH connection to 192.168.1.242
Fri Jul 17 17:07:28[26632]: Error 852 in 'main': SSH connection to 192.168.1.242 failed. Did you send the public key?

But I have done the affa --send-key and it shows up in the target server's /root/.ssh/authorized_keys2

[janet]

chrislaurie

From the server command prompt can you successfully do a
ping 192.168.1.242

Is ssh enabled on the backup server ?

[chrislaurie]

Yes I can indeed ping the server, I can ping both from the other. I have ssh on for both machines. I use putty to get into them at the command level.

I notice there is an entry in the known_hosts file on the prodserver for my affabox, and that the date time is quite old (I used the set-up a long time ago). Could that be the problem, and if so, how does one 'rebuild' the known_hosts file?

Also key-revoke on the affa box for the prodserver returns an  error.

[janet]

chrislaurie

Did you upgrade Affa, there was a warning in the wiki about a required fix.
A simple approach to troubleshooting may be to delete the whole job and set it up again, and see if that resolves issues.

[chrislaurie]

The problem was with the known_hosts file. There were entries that had an old host key of the prodserver. Here's what I did:

• I manually edited the known_hosts file on the affabox and removed the old key for prodserver.
• Then I ssh'd to the prodserver from the affabox (ssh prodserver_ip)
• It asked me if I want to add the key and then prompted for password. Exit ssh
• Then I resent the key to prodserver - it prompted me for a password (which it had not done before).
• Then I manually ran the job and it is now running and there seems to be some communication happening.

I think this worked. I would like to add this to the wiki but doe not have editing rights.

[janet]

chrislaurie

I would like to add this to the wiki but do not have editing rights.

At the top of forums, click on Profile, Modify Profile, Group Membership.
Then alongside the entry for Wiki & Docs Team, click on Request membership