*New 11.3 series Release:
2019-10-19: XigmaNAS 11.3.0.4.7014 - released

*New 12.0 series Release:
2019-10-05: XigmaNAS 12.0.0.4.6928 - released!

*New 11.2 series Release:
2019-09-23: XigmaNAS 11.2.0.4.6881 - released!

We really need "Your" help on XigmaNAS https://translations.launchpad.net/xigmanas translations. Please help today!

Producing and hosting XigmaNAS costs money. Please consider donating for our project so that we can continue to offer you the best.
We need your support! eg: PAYPAL

Failed to execute service raki

Secure shell connections.
Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Failed to execute service raki

#1

Post by biggsy » 09 Jun 2019 03:29

Hi ms49434,

Thanks to you and the team for adding this. Unfortunately, I haven't been able to get public key SSH login to work.

I'm using a key produced by Puttygen, which I also use for a number of other systems.

I added the key to root and enabled it through the GUI. I also tried enabling Allow public key authentication and Allow root to login via SSH via Services > SSH. No luck.

Then I noticed that 11.2.0.4.6743 had been pushed out so I upgraded from 6737 and tried again. Still no luck.

The log shows:
sshd[2642]: error: Received disconnect from 192.168.111.8 port 56922:14: No supported authentication methods available [preauth]
and (though I don't know if it's related):
root: Failed to execute service raki

Filezilla reports:
Error: Disconnected: No supported authentication methods available (server sent: publickey)

Also receiving the error "Error: The changes could not be applied (Error Code 126)." when attempting to update the key through the GUI.

Is there something I've missed in setting this up?

User avatar
ms49434
Developer
Developer
Posts: 718
Joined: 03 Sep 2015 18:49
Location: Neuenkirchen-Vörden, Germany - GMT+1
Contact:
Status: Offline

Re: Failed to execute service raki

#2

Post by ms49434 » 09 Jun 2019 13:19

biggsy wrote:
09 Jun 2019 03:29
Hi ms49434,

Thanks to you and the team for adding this. Unfortunately, I haven't been able to get public key SSH login to work.

I'm using a key produced by Puttygen, which I also use for a number of other systems.

I added the key to root and enabled it through the GUI. I also tried enabling Allow public key authentication and Allow root to login via SSH via Services > SSH. No luck.

Then I noticed that 11.2.0.4.6743 had been pushed out so I upgraded from 6737 and tried again. Still no luck.

The log shows:
sshd[2642]: error: Received disconnect from 192.168.111.8 port 56922:14: No supported authentication methods available [preauth]
and (though I don't know if it's related):
root: Failed to execute service raki

Filezilla reports:
Error: Disconnected: No supported authentication methods available (server sent: publickey)

Also receiving the error "Error: The changes could not be applied (Error Code 126)." when attempting to update the key through the GUI.

Is there something I've missed in setting this up?
Error code 126 could indicate a permission issue. You can run

Code: Select all

/etc/rc.d/raki
from the console to receive more details.

My sshd configuration is plain standard:
services_sshd.png
the resulting sshd_config file (/var/etc/ssh/sshd_config) doesn't contain any special configuration:

Code: Select all

xigmanas: ~# cat /var/etc/ssh/sshd_config
HostKeyAlgorithms ssh-ed25519,ssh-rsa,ssh-dss
HostKey /var/etc/ssh/ssh_host_rsa_key
SyslogFacility LOCAL3
Protocol 2
UseDNS no
Subsystem sftp /usr/libexec/sftp-server
ChallengeResponseAuthentication no
Port 22
PermitRootLogin yes
AllowTcpForwarding yes
Compression yes
PasswordAuthentication yes
PubkeyAuthentication yes
xigmanas: ~# 
The Public Key overview page:
access_publickey.png
And a configuration record:
access_publickey_edit.png
Logging in as root using public key authentication is successful:

Code: Select all

~$ ssh 192.168.0.44 -l root
Last login: Sun Jun  9 13:04:47 2019 from 192.168.0.57
Welcome to XigmaNAS!
xigmanas: ~#
The authorized_keys file contains:

Code: Select all

xigmanas: ~# cat ~/.ssh/authorized_keys 
# created by raki
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPgoAAP4/1wvg/fqzq/ybM0T...
You do not have the required permissions to view the files attached to this post.
1) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 22GB out of 32GB ECC RAM, LSI 9300-8i IT mode in passthrough mode. Pool 1: 2x HGST 10TB, mirrored, SLOG: Samsung 850 Pro, L2ARC: Samsung 850 Pro, Pool 2: 1x Samsung 860 EVO 1TB , services: Samba AD, CIFS/SMB, ftp, ctld, rsync, syncthing, zfs snapshots.
2) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 8GB out of 32GB ECC RAM, IBM M1215 crossflashed, IT mode, passthrough mode, 2x HGST 10TB , services: rsync.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#3

Post by biggsy » 10 Jun 2019 03:04

Hmmm...

So my SSH Global settings are the same as yours:
2019-06-10_10-48-01.jpg

My publc keys config is also similar:
2019-06-10_10-49-02.jpg

Although /var/etc/ssh/sshd_config looks very simiilar to yours,
the command line run of /etc/rc.d/raki only produces
2019-06-10_10-58-21.jpg
Thanks again for looking into this.
You do not have the required permissions to view the files attached to this post.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#4

Post by biggsy » 10 Jun 2019 03:20

Permissions on /etc/rc.d/raki were set to 644. (Hadn't been modified by me.)

Changed to 744 and it worked.

All good and thanks again.

BTW, would you agree it that it might be more intuitive to separate SSH Server and Client config values, rather than having both under SSH > Global settings?

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#5

Post by biggsy » 10 Jun 2019 04:07

After a reboot, /etc/rc.d/raki permissions were reset to 644 so it fails to start.

I've searched everywhere I can think of but can't find what might be resetting the permissions on this file.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#6

Post by biggsy » 11 Jun 2019 22:55

I can't figure out why the file permissions for /etc/rc.d/raki are being reset at every boot.

Any suggestions?

User avatar
ms49434
Developer
Developer
Posts: 718
Joined: 03 Sep 2015 18:49
Location: Neuenkirchen-Vörden, Germany - GMT+1
Contact:
Status: Offline

Re: Failed to execute service raki

#7

Post by ms49434 » 12 Jun 2019 02:17

biggsy wrote:
11 Jun 2019 22:55
I can't figure out why the file permissions for /etc/rc.d/raki are being reset at every boot.

Any suggestions?
To verify permissions you can install a vanilla 6743 onto a new stick. If the permission shows 755 you should check your live system for scripts running at system start, i.e. command scripts.
1) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 22GB out of 32GB ECC RAM, LSI 9300-8i IT mode in passthrough mode. Pool 1: 2x HGST 10TB, mirrored, SLOG: Samsung 850 Pro, L2ARC: Samsung 850 Pro, Pool 2: 1x Samsung 860 EVO 1TB , services: Samba AD, CIFS/SMB, ftp, ctld, rsync, syncthing, zfs snapshots.
2) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 8GB out of 32GB ECC RAM, IBM M1215 crossflashed, IT mode, passthrough mode, 2x HGST 10TB , services: rsync.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#8

Post by biggsy » 12 Jun 2019 02:54

Thanks, ms49434.

I had forgotten to mention that this is happening on two independent machines, one virtual under ESXi and the other on bare metal.
Both are running 6743, having been upgraded a couple of times from earlier releases.

There certainly wouldn't be any scripts that I've created - wouldn't know where to begin :-)
I'll try a fresh install as you suggest.
Last edited by biggsy on 12 Jun 2019 08:48, edited 1 time in total.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#9

Post by biggsy » 12 Jun 2019 05:50

Hi ms49434,

Fresh installed to a new VM and the default permissions for /etc/rc.d/raki are set to 644.

Still puzzled about why, after changing to 744, they are reset to 644 at reboot.

User avatar
ms49434
Developer
Developer
Posts: 718
Joined: 03 Sep 2015 18:49
Location: Neuenkirchen-Vörden, Germany - GMT+1
Contact:
Status: Offline

Re: Failed to execute service raki

#10

Post by ms49434 » 12 Jun 2019 10:11

biggsy wrote:
12 Jun 2019 05:50
Hi ms49434,

Fresh installed to a new VM and the default permissions for /etc/rc.d/raki are set to 644.

Still puzzled about why, after changing to 744, they are reset to 644 at reboot.
please provide the following information:
- which installation file you are using (i.e. XigmaNAS-x64-LiveCD-12.0.0.4.6743.iso) and
- which installation method you've chosen (i.e. embedded-GPT).

I did a quick test, downloaded and booted XigmaNAS-x64-LiveCD-12.0.0.4.6743.iso, confirmed that raki on the installation media has 755 permission set and did an embedded-GPT install, booted and confirmed that raki on the installation has 755 permission set.
1) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 22GB out of 32GB ECC RAM, LSI 9300-8i IT mode in passthrough mode. Pool 1: 2x HGST 10TB, mirrored, SLOG: Samsung 850 Pro, L2ARC: Samsung 850 Pro, Pool 2: 1x Samsung 860 EVO 1TB , services: Samba AD, CIFS/SMB, ftp, ctld, rsync, syncthing, zfs snapshots.
2) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 8GB out of 32GB ECC RAM, IBM M1215 crossflashed, IT mode, passthrough mode, 2x HGST 10TB , services: rsync.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#11

Post by biggsy » 12 Jun 2019 11:50

Hi ms49434,

Same as you.
Correction - I see you are using 12. I might give that a try too.

Installation file: XigmaNAS-x64-LiveCD-11.2.0.4.6743.iso

Install type: 'Embedded' OS/GPT on HDD/SSD/CF/USB (Preferred)

Here's a snapshot of the booted fresh install (after changing it's IP address only)
2019-06-12_19-45-12.jpg


Thanks for you help with this.
You do not have the required permissions to view the files attached to this post.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#12

Post by biggsy » 13 Jun 2019 01:03

So here is the result from installing XigmaNAS-x64-LiveCD-12.0.0.4.6743.iso
Note the ls-l /etc/rc.d/raki at the end


2019-06-13_08-57-27.jpg

Looks like it's just the XigmaNAS-x64-LiveCD-11.2.0.4.6743_2.iso that installs with 644 permissions.
You do not have the required permissions to view the files attached to this post.

User avatar
ms49434
Developer
Developer
Posts: 718
Joined: 03 Sep 2015 18:49
Location: Neuenkirchen-Vörden, Germany - GMT+1
Contact:
Status: Offline

Re: Failed to execute service raki

#13

Post by ms49434 » 13 Jun 2019 01:18

biggsy wrote:
13 Jun 2019 01:03
So here is the result from installing XigmaNAS-x64-LiveCD-12.0.0.4.6743.iso
Note the ls-l /etc/rc.d/raki at the end



2019-06-13_08-57-27.jpg


Looks like it's just the XigmaNAS-x64-LiveCD-11.2.0.4.6743_2.iso that installs with 644 permissions.
as an interim solution you can add a postinit command to apply 755 permissions and run raki:
system_rc_edit.png
You do not have the required permissions to view the files attached to this post.
1) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 22GB out of 32GB ECC RAM, LSI 9300-8i IT mode in passthrough mode. Pool 1: 2x HGST 10TB, mirrored, SLOG: Samsung 850 Pro, L2ARC: Samsung 850 Pro, Pool 2: 1x Samsung 860 EVO 1TB , services: Samba AD, CIFS/SMB, ftp, ctld, rsync, syncthing, zfs snapshots.
2) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 8GB out of 32GB ECC RAM, IBM M1215 crossflashed, IT mode, passthrough mode, 2x HGST 10TB , services: rsync.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#14

Post by biggsy » 13 Jun 2019 01:55

ms49434 wrote:
13 Jun 2019 01:18

as an interim solution you can add a postinit command to apply 755 permissions and run raki:
system_rc_edit.png
Many thanks. I will do that for the short term.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#15

Post by biggsy » 25 Jun 2019 06:07

Hi ms49434,

Did the raki file permissions fix for this make it into 11.2.0.4.6766?

If I disable the postinit command and reboot I can't ssh in with a public key.

I'm not seeing the error root: Failed to execute service raki now, but the file perms are at 644.

User avatar
ms49434
Developer
Developer
Posts: 718
Joined: 03 Sep 2015 18:49
Location: Neuenkirchen-Vörden, Germany - GMT+1
Contact:
Status: Offline

Re: Failed to execute service raki

#16

Post by ms49434 » 25 Jun 2019 10:01

biggsy wrote:
25 Jun 2019 06:07
Hi ms49434,

Did the raki file permissions fix for this make it into 11.2.0.4.6766?

If I disable the postinit command and reboot I can't ssh in with a public key.

I'm not seeing the error root: Failed to execute service raki now, but the file perms are at 644.
Apologies, I just recognized that the executable flag didn't make it into the repository, branch 11.2.0.4.
1) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 22GB out of 32GB ECC RAM, LSI 9300-8i IT mode in passthrough mode. Pool 1: 2x HGST 10TB, mirrored, SLOG: Samsung 850 Pro, L2ARC: Samsung 850 Pro, Pool 2: 1x Samsung 860 EVO 1TB , services: Samba AD, CIFS/SMB, ftp, ctld, rsync, syncthing, zfs snapshots.
2) XigmaNAS 12.0.0.4 amd64-embedded on a Dell T20 running in a VM on ESXi 6.7U2, 8GB out of 32GB ECC RAM, IBM M1215 crossflashed, IT mode, passthrough mode, 2x HGST 10TB , services: rsync.

biggsy
experienced User
experienced User
Posts: 80
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: Failed to execute service raki

#17

Post by biggsy » 25 Jun 2019 13:16

Thanks.

No apology expected. It's not a big deal to reinstate the postinit workaround.

Post Reply

Return to “SSH”