Greetings group,
I’m having an issue with Bro and clustering. I keep getting this error:
[BroControl] > install
removing old policies in /usr/local/bro/share/bro/.site … done.
creating policy directories … done.
installing site policies … done.
generating broctl-layout.bro … done.
generating analysis-policy.bro … done.
generating local-networks.bro … done.
updating nodes … Permission denied (publickey,keyboard-interactive).
warning: connection to 10.10.2.13 broke
Permission denied (publickey,keyboard-interactive).
warning: connection to 10.10.2.14 broke
warning: connection to 10.10.2.13 broke
warning: connection to 10.10.2.14 broke
warning: connection to 10.10.2.13 broke
warning: connection to 10.10.2.14 broke
warning: connection to 10.10.2.13 broke
warning: connection to 10.10.2.14 broke
warning: cannot create directory /usr/local/bro/spool/tmp on worker-1
warning: cannot create directory /usr/local/bro/spool/tmp on worker-2
warning: cannot create directory /usr/local/bro/spool/tmp on worker-1
warning: cannot create directory /usr/local/bro/spool/tmp on worker-2
warning: cannot create directory /usr/local/bro/spool/tmp on worker-1
warning: cannot create directory /usr/local/bro/spool/tmp on worker-2
warning: cannot create directory /usr/local/bro/spool/tmp on worker-1
warning: cannot create directory /usr/local/bro/spool/tmp on worker-2
warning: error rsyncing to 10.10.2.13: [‘Permission denied (publickey,keyboard-interactive).\r’, ‘rsync: connection unexpectedly closed (0 bytes received so far) [sender]’, ‘rsync error: unexplained error (code 255) at io.c(600) [sender=3.0.6]’]
warning: error rsyncing to 10.10.2.14: [‘Permission denied (publickey,keyboard-interactive).\r’, ‘rsync: connection unexpectedly closed (0 bytes received so far) [sender]’, ‘rsync error: unexplained error (code 255) at io.c(600) [sender=3.0.6]’]
done.
I thought I had all my permissions correct but I guess not. I know rsync works and ssh (with out a password).
Any thoughts?
Thanks,
–John
|
warning: error rsyncing to 10.10.2.13: ['Permission denied
(publickey,keyboard-interactive).\r', 'rsync: connection
unexpectedly closed (0 bytes received so far) [sender]', 'rsync
error: unexplained error (code 255) at io.c(600) [sender=3.0.6]']
While broctl could fail a bit nicer, this certainly looks like the
SSH login isn't working.
rsync works and ssh (with out a password).
Could there be different accounts involved in some form, some for
which it works and others for which it doesn't?
Robin