[tech] Flame VM (was Re: Reducing entropy on mooneye )

[Mark Tearle]

On Sun, 14 Jun 2020, at 12:40 AM, Andrew Williams wrote:
> On 2020-06-13 3:27 PM, Mark Tearle wrote:
> 
> >> 3) We might need to work out why flame has the same uid as andrew and
> >> correct this.
> >>
> >> Yep, that's weird. Until then, I don't have root access on mooneye or
> >> maculatus. If I try to 'sudo' (on maculatus or mooneye), whether I'm
> >> logged in as 'flame' or 'andrew', it asks for the the password for
> >> 'flame', and as far as I know, the flame account doesn't have a
> >> password. I can use sudo on motsugo, so it must just the UID clash on
> >> those two machines.
> >>
> > 
> > I've changed flames UID to 4242 to fix this.  Nick looked up the UIDs for yourself and flame historically.  Flame has been 26 and 10026 in previous passwd files.    Your password entry is coming from AD, whereas flame is a local user on the VM.
> 
> Thanks Mark, but there's a teeny problem - now I can't log into 
> maculatus at all...
> 
> 'ssh -J motsugo.ucc.asn.au andrew at maculatus.ucc.asn.au' asks me for a 
> password, and my UCC password doesn't work. Last night, this worked, and 
> didn't ask me for a password.
> 
*snip*

> I have no idea what's going on here - not sure whether it's something 
> simple, like ~andrew/.ssh being owned by the wrong UID, or something 
> subtle to do with the AD setup.
>

In today's episode of that should have never worked, 
Jun 14 00:25:32 maculatus sshd[1614]: User andrew not allowed because shell /bin/tcsh does not exist

I've now installed the tcsh package and hopefully you should be able to log in now.
 
> Anyway instead of doing a final backup, I've logged into the old and new 
> flame and posted notes explaining the swapover and the new IP address. 
> James, Michael and Leighton will just lose a few hours on their login 
> counters.
> 
> Andrew
>

Cool.  Thank you :)

Mark
--
Mark Tearle <mtearle at ucc.asn.au>