Cloud-setup-management will do that for you, so you don't need to worry about it in a production environment.
> -----Original Message----- > From: Chip Childers [mailto:chip.child...@sungard.com] > Sent: Monday, November 12, 2012 11:33 AM > To: cloudstack-dev@incubator.apache.org > Subject: Re: Issue : cannot connect to management server (SSL related ....) > > Hey Edison, > > Does this mean that on a production management server, the cloud user > needs password-less sudo permission? Am I reading too much into this? > > -chip > > On Mon, Nov 12, 2012 at 1:40 PM, Edison Su <edison...@citrix.com> wrote: > > Need to make sure nopasswd for > > sudo(http://www.ducea.com/2006/06/18/linux-tips-password-usage-in- > sudo > > -passwd-nopasswd/) > > > > > >> -----Original Message----- > >> From: Charles Moulliard [mailto:ch0...@gmail.com] > >> Sent: Friday, November 09, 2012 8:17 AM > >> To: cloudstack-dev > >> Subject: Issue : cannot connect to management server (SSL related > >> ....) > >> > >> Hi, > >> > >> With last code available on master Git Hub repo, when I execute the > >> following command "mvn -pl :cloud-client-ui jetty:run" I get the > >> message that the mnget server cannot reached : > >> > >> INFO [cloud.api.ApiServer] (Thread-18:) ApiServer listening on port > >> 8096 > >> 2012-11-09 10:30:08.527:INFO::Started > >> SelectChannelConnector@0.0.0.0:8080 > >> [INFO] Started Jetty Server > >> INFO [cloud.cluster.ClusterManagerImpl] (Cluster-Heartbeat-1:) We > >> are good, no orphan management server msid in host table is found > >> INFO [cloud.cluster.ClusterManagerImpl] (Cluster-Heartbeat-1:) No > >> inactive management server node found WARN > >> [cloud.cluster.ClusterManagerImpl] > >> (Cluster-Notification-1:) Notifying management server join event took > >> 5 ms > >> > >> This issue occurs not matter if I define in devcloud.cfg file mngtSrv > >> = > >> 127.0.0.1 or 192.168.56.2 > >> In consequence, when I open the client in the web browser ( > >> http://localhost:8080/client), the first screen asks me to define the > >> configuration > >> > >> Could this be related to the following WARN appearing in log ? > >> > >> INFO [cloud.server.ConfigurationServerImpl] (main:) SSL keystore > >> located at > >> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-clien > >> t-ui- 4.1.0-SNAPSHOT/WEB-INF/classes/cloud.keystore > >> Password: > >> WARN [utils.script.Script] (Script-1:) Interrupting script. > >> WARN [utils.script.Script] (main:) Timed out: sudo keytool -genkey > >> -keystore > >> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-clien > >> t-ui- 4.1.0-SNAPSHOT/WEB-INF/classes/cloud.keystore > >> -storepass vmops.com -keypass vmops.com -keyalg RSA -validity 3650 - > >> dname cn="Cloudstack > User",ou="cloud.com",o="cloud.com",c="Unknown" . > >> Output is: > >> WARN [cloud.server.ConfigurationServerImpl] (main:) Would use > >> fail-safe keystore to continue. > >> java.io.IOException: Fail to generate certificate! > >> at > >> > com.cloud.server.ConfigurationServerImpl.generateDefaultKeystore(Conf > >> ig > >> urationServerImpl.java:476) > >> at > >> > com.cloud.server.ConfigurationServerImpl.updateSSLKeystore(Configurat > >> io > >> nServerImpl.java:497) > >> at > >> com.cloud.server.ConfigurationServerImpl.persistDefaultValues(Configu > >> rati > >> onServerImpl.java:265) > >> at > >> com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:3 > >> 4) at > >> com.cloud.servlet.CloudStartupServlet.init(CloudStartupServlet.java:4 > >> 7) at javax.servlet.GenericServlet.init(GenericServlet.java:241) > >> at > >> org.mortbay.jetty.servlet.ServletHolder.initServlet(ServletHolder.jav > >> a:440) > >> > >> WARN [cloud.server.ConfigurationServerImpl] (main:) Exception: > >> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-clien > >> t-ui- > >> 4.1.0-SNAPSHOT/WEB-INF/classes/scripts/vm/systemvm/injectkeys.sh > >> /Users/chmoulli/.ssh/id_rsa.pub /Users/chmoulli/.ssh/id_rsa > >> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-clien > >> t-ui- 4.1.0-SNAPSHOT/WEB-INF/classes/vms/systemvm.iso > >> java.io.IOException: Cannot run program > >> "/Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-clie > >> nt-ui- > >> 4.1.0-SNAPSHOT/WEB-INF/classes/scripts/vm/systemvm/injectkeys.sh": > >> error=13, Permission denied > >> at java.lang.ProcessBuilder.start(ProcessBuilder.java:460) > >> at com.cloud.utils.script.Script.execute(Script.java:183) > >> at com.cloud.utils.script.Script.execute(Script.java:161) > >> at > >> > com.cloud.server.ConfigurationServerImpl.injectSshKeysIntoSystemVmIso > >> P > >> atch(ConfigurationServerImpl.java:722) > >> at > >> com.cloud.server.ConfigurationServerImpl.updateKeyPairs(Configuration > >> Ser > >> verImpl.java:660) > >> at > >> com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:3 > >> 4) > >> at > >> com.cloud.server.ConfigurationServerImpl.persistDefaultValues(Configu > >> rati > >> onServerImpl.java:268) > >> at > >> com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:3 > >> 4) at > >> com.cloud.servlet.CloudStartupServlet.init(CloudStartupServlet.java:4 > >> 7) > >> > >> Regards, > >> > >> -- > >> Charles Moulliard > >> Apache Committer / Sr. Enterprise Architect (RedHat) Twitter : > >> @cmoulliard | Blog : http://cmoulliard.blogspot.com > >
