<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
On 10/29/10 7:55 PM, Dan Tenenbaum wrote:<br>
<br>
<blockquote
cite="mid:AANLkTikPtH75mPieMU7Ry_ihteNf+CsRoL8U1S4-9J2D@mail.gmail.com"
type="cite">
<div><font class="Apple-style-span" face="'times new roman',
serif">Finally, if you wish to circumvent the Ubuntu security
standard and revert to the old practice of allowing ssh and
rsync as root, this command will open it up for a new instance
of the official Ubuntu images:</font></div>
<div><font class="Apple-style-span" face="'times new roman',
serif"><br>
</font></div>
<div><font class="Apple-style-span" face="'times new roman',
serif">ssh -i KEYPAIR.pem ubuntu@HOSTNAME 'sudo cp
/home/ubuntu/.ssh/authorized_keys /root/.ssh/'</font></div>
</blockquote>
That is only a temporary solution, this will NOT fix things
permanently. The cloud-init scripts *must* be configured properly.<br>
<blockquote
cite="mid:AANLkTikPtH75mPieMU7Ry_ihteNf+CsRoL8U1S4-9J2D@mail.gmail.com"
type="cite">
<div>I didn't have to do any of the steps described on the
cookbook page.</div>
<div>I'll find out later I guess if they are still necessary.</div>
</blockquote>
They are definitely necessary. The cloud-init scripts run at start
up and configure root's authorized_keys file based on the public key
in the instance's meta-data. If the cloud-init scripts are not
configured properly (via /etc/cloud) they will not allow you to
login as root because Alestic has decided to ban root login in favor
of a ubuntu user account that has full root privileges without
needing a password (this is kind of stupid IMO, where's the security
in that? you've effectively renamed root to ubuntu).<br>
<br>
StarCluster strictly requires root login to be allowed and this is
definitely handled by the cloud-init package. Setting disable_root:
0 should be all you need. Otherwise, something else is up with your
AMI or the cloud-init scripts.<br>
<br>
~Justin<br>
</body>
</html>