# Bro Cluster Issue

**URL:** <https://community.zeek.org/t/bro-cluster-issue/1655>\
**Category:** Zeek\
**Created:** [August 26, 2010, 10:11pm UTC](https://community.zeek.org/t/bro-cluster-issue/1655 "2010-08-26T22:11:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![epsalon135](https://avatars.discourse-cdn.com/v4/letter/e/eb8c5e/32.png) [@epsalon135](https://community.zeek.org/u/epsalon135)\
**Post date:** [August 26, 2010, 10:11pm UTC](https://community.zeek.org/t/bro-cluster-issue/1655/1 "2010-08-26T22:11:38Z")

</div>

> Greetings group,  
>   
> I’m having an issue with Bro and clustering. I keep getting this error:  
>   
> [BroControl] \> install  
> removing old policies in /usr/local/bro/share/bro/.site … done.  
> creating policy directories … done.  
> installing site policies … done.  
> generating broctl-layout.bro … done.  
> generating analysis-policy.bro … done.  
> generating local-networks.bro … done.  
> updating nodes … Permission denied (publickey,keyboard-interactive).  
> warning: connection to 10.10.2.13 broke  
> Permission denied (publickey,keyboard-interactive).  
> warning: connection to 10.10.2.14 broke  
> warning: connection to 10.10.2.13 broke  
> warning: connection to 10.10.2.14 broke  
> warning: connection to 10.10.2.13 broke  
> warning: connection to 10.10.2.14 broke  
> warning: connection to 10.10.2.13 broke  
> warning: connection to 10.10.2.14 broke  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-1  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-2  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-1  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-2  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-1  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-2  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-1  
> warning: cannot create directory /usr/local/bro/spool/tmp on worker-2  
> warning: error rsyncing to 10.10.2.13: [‘Permission denied (publickey,keyboard-interactive).\r’, ‘rsync: connection unexpectedly closed (0 bytes received so far) [sender]’, ‘rsync error: unexplained error (code 255) at io.c(600) [sender=3.0.6]’]  
> warning: error rsyncing to 10.10.2.14: [‘Permission denied (publickey,keyboard-interactive).\r’, ‘rsync: connection unexpectedly closed (0 bytes received so far) [sender]’, ‘rsync error: unexplained error (code 255) at io.c(600) [sender=3.0.6]’]  
> done.  
>   
> I thought I had all my permissions correct but I guess not. I know rsync works and ssh (with out a password).  
>   
> Any thoughts?  
>   
> Thanks,  
>   
> –John  
> |

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [August 27, 2010, 5:03am UTC](https://community.zeek.org/t/bro-cluster-issue/1655/2 "2010-08-27T05:03:58Z")

</div>

> warning: error rsyncing to 10.10.2.13: ['Permission denied  
> (publickey,keyboard-interactive).\r', 'rsync: connection  
> unexpectedly closed (0 bytes received so far) [sender]', 'rsync  
> error: unexplained error (code 255) at io.c(600) [sender=3.0.6]']

While broctl could fail a bit nicer, this certainly looks like the  
SSH login isn't working.

> rsync works and ssh (with out a password).

Could there be different accounts involved in some form, some for  
which it works and others for which it doesn't?

Robin

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:39pm UTC](https://community.zeek.org/t/bro-cluster-issue/1655/3 "2022-05-06T15:39:09Z")

</div>

Closed on May 6, 2022, 3:39pm UTC


