ssh from IUX Server GUI for network recovery

[Chris Petrina]

When the IUX server attempts to ssh to the client what account is it trying to use? bin/root?
root is not allowed to ssh over the network we use the authorized_keys the only way I have found to get make_net_recovery work is
ssh -l root clientname make_net_recovery -s IUX server name.

any way to allow this same action from the GUI?

[IT_2007 · Accepted solution]

it runs as root not bin. Why do you want to use GUI when you are able to run it through command line.

Otherwise use sudo or suid for /opt/ignite/bin/make_net_recovery so that you can kick off on the client with "root" equivalent.

[Chris Petrina]

Thanks for the info about the initial ssh from the GUI that helps. We have specific rules about which way and form which devices root can execute. we use the authorized_key file on the clients to match root of the server. So we are doing a server -> client install instead of from the client to the server.