cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3958
Views
3
Helpful
4
Replies

Error Connecting to ODL Karaf

brfoster
Cisco Employee
Cisco Employee

I just installed the Boron release of ODL.  I get an error when I try to connect to the Karaf client interface.  Any pointers?

[gibson@rickenbacker bin]$ ./status

Running ...

[gibson@rickenbacker bin]$ ./client -u karaf

Logging in as karaf

539 [sshd-SshClient[7b1d7fff]-nio2-thread-1] WARN org.apache.sshd.client.session.ClientSessionImpl - Exception caught

java.security.ProviderException: java.security.KeyException

        at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:147)

        at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:703)

        at org.apache.sshd.common.kex.ECDH.getE(ECDH.java:59)

        at org.apache.sshd.client.kex.AbstractDHGClient.init(AbstractDHGClient.java:74)

        at org.apache.sshd.common.session.AbstractSession.doHandleMessage(AbstractSession.java:390)

        at org.apache.sshd.common.session.AbstractSession.handleMessage(AbstractSession.java:326)

        at org.apache.sshd.client.session.ClientSessionImpl.handleMessage(ClientSessionImpl.java:306)

        at org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:780)

        at org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:308)

        at org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:54)

        at org.apache.sshd.common.io.nio2.Nio2Session$1.onCompleted(Nio2Session.java:184)

        at org.apache.sshd.common.io.nio2.Nio2Session$1.onCompleted(Nio2Session.java:170)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler$1.run(Nio2CompletionHandler.java:32)

        at java.security.AccessController.doPrivileged(Native Method)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler.completed(Nio2CompletionHandler.java:30)

        at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)

        at sun.nio.ch.Invoker.invokeDirect(Invoker.java:157)

        at sun.nio.ch.UnixAsynchronousSocketChannelImpl.implRead(UnixAsynchronousSocketChannelImpl.java:553)

        at sun.nio.ch.AsynchronousSocketChannelImpl.read(AsynchronousSocketChannelImpl.java:276)

        at sun.nio.ch.AsynchronousSocketChannelImpl.read(AsynchronousSocketChannelImpl.java:297)

        at java.nio.channels.AsynchronousSocketChannel.read(AsynchronousSocketChannel.java:420)

        at org.apache.sshd.common.io.nio2.Nio2Session.startReading(Nio2Session.java:170)

        at org.apache.sshd.common.io.nio2.Nio2Connector$1.onCompleted(Nio2Connector.java:60)

        at org.apache.sshd.common.io.nio2.Nio2Connector$1.onCompleted(Nio2Connector.java:53)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler$1.run(Nio2CompletionHandler.java:32)

        at java.security.AccessController.doPrivileged(Native Method)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler.completed(Nio2CompletionHandler.java:30)

        at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)

        at sun.nio.ch.Invoker$2.run(Invoker.java:218)

        at sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at java.lang.Thread.run(Thread.java:745)

Caused by: java.security.KeyException

        at sun.security.ec.ECKeyPairGenerator.generateECKeyPair(Native Method)

        at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:128)

        ... 32 more

Authentication failed

4 Replies 4

brfoster
Cisco Employee
Cisco Employee

Update:

I found this discussion and seems to be my same issue...

https://ask.opendaylight.org/question/1524/karaf-client-failes-to-connect-to-a-server-under-linux/

Just like this person, I can SSH connect to the karaf client (see below).  However, the client script still fails with "Authentication failed".    I didn't have this issue with the previous "Beryllium" release.

[gibson@rickenbacker bin]$ ssh -p 8101 -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no karaf@localhost

Warning: Permanently added '[localhost]:8101' (RSA) to the list of known hosts.

Password authentication

Password:

    ________                       ________                .__  .__       .__     __

    \_____  \ ______   ____   ____ \______ \ _____  ___.__.|  | |__| ____ |  |___/  |_

     /   |   \\____ \_/ __ \ /    \ |    |  \\__  \<   |  ||  | |  |/ ___\|  |  \   __\

    /    |    \  |_> >  ___/|   |  \|    `   \/ __ \\___  ||  |_|  / /_/  >   Y  \  |

    \_______  /   __/ \___  >___|  /_______  (____  / ____||____/__\___  /|___|  /__|

            \/|__|        \/     \/        \/     \/\/            /_____/      \/

Hit '<tab>' for a list of available commands

and '[cmd] --help' for help on a specific command.

Hit '<ctrl-d>' or type 'system:shutdown' or 'logout' to shutdown OpenDaylight.

opendaylight-user@root>

I am running the Boron release and do not see this issue. What happens when you start karaf initially? For comparison, here is what I get:

---

ECKELCU-M-H15L:distribution-karaf-0.5.0-Boron eckelcu$ cd bin

ECKELCU-M-H15L:bin eckelcu$ ls

client                setenv

client.bat            setenv.bat

configure-cluster-ipdetect.sh    shell

configure_cluster.sh        shell.bat

custom_shard_config.txt        start

instance            start.bat

instance.bat            status

karaf                status.bat

karaf.bat            stop

set_persistence.sh        stop.bat

ECKELCU-M-H15L:bin eckelcu$ ./status

Not Running ...

ECKELCU-M-H15L:bin eckelcu$ ./karaf

karaf: Enabling Java debug options: -Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5005

Listening for transport dt_socket at address: 5005

Apache Karaf starting up. Press Enter to open the shell now...

100% [========================================================================]

Karaf started in 15s. Bundle stats: 324 active, 324 total

                                                                                          

    ________                       ________                .__  .__       .__     __      

    \_____  \ ______   ____   ____ \______ \ _____  ___.__.|  | |__| ____ |  |___/  |_    

     /   |   \\____ \_/ __ \ /    \ |    |  \\__  \<   |  ||  | |  |/ ___\|  |  \   __\   

    /    |    \  |_> >  ___/|   |  \|    `   \/ __ \\___  ||  |_|  / /_/  >   Y  \  |     

    \_______  /   __/ \___  >___|  /_______  (____  / ____||____/__\___  /|___|  /__|     

            \/|__|        \/     \/        \/     \/\/            /_____/      \/         

                                                                                          

Hit '<tab>' for a list of available commands

and '[cmd] --help' for help on a specific command.

Hit '<ctrl-d>' or type 'system:shutdown' or 'logout' to shutdown OpenDaylight.

opendaylight-user@root>

---

And then from another window I try to connect to karaf:

---

ECKELCU-M-H15L:distribution-karaf-0.5.0-Boron eckelcu$ ls

CONTRIBUTING.markdown    data            lib

LICENSE            deploy            lock

README.markdown        etc            snapshots

bin            idmlight.db.mv.db    system

cache            instances        taglist.log

configuration        journal            version.properties

ECKELCU-M-H15L:distribution-karaf-0.5.0-Boron eckelcu$ cd bin

ECKELCU-M-H15L:bin eckelcu$ ./status

Running ...

ECKELCU-M-H15L:bin eckelcu$ ./client -u karaf

Logging in as karaf

5336 [sshd-SshClient[47542153]-nio2-thread-3] WARN org.apache.sshd.client.keyverifier.AcceptAllServerKeyVerifier - Server at [/0.0.0.0:8101, RSA, 43:a9:43:de:8e:dd:90:cc:f6:4c:de:43:4a:1c:42:4b] presented unverified {} key: {}

                                                                                          

    ________                       ________                .__  .__       .__     __      

    \_____  \ ______   ____   ____ \______ \ _____  ___.__.|  | |__| ____ |  |___/  |_    

     /   |   \\____ \_/ __ \ /    \ |    |  \\__  \<   |  ||  | |  |/ ___\|  |  \   __\   

    /    |    \  |_> >  ___/|   |  \|    `   \/ __ \\___  ||  |_|  / /_/  >   Y  \  |     

    \_______  /   __/ \___  >___|  /_______  (____  / ____||____/__\___  /|___|  /__|     

            \/|__|        \/     \/        \/     \/\/            /_____/      \/         

                                                                                          

Hit '<tab>' for a list of available commands

and '[cmd] --help' for help on a specific command.

Hit '<ctrl-d>' or type 'system:shutdown' or 'logout' to shutdown OpenDaylight.

opendaylight-user@root>

---

I am also curious as to which version of Java you are using:

---

ECKELCU-M-H15L:bin eckelcu$ java -version

java version "1.8.0_77"

Java(TM) SE Runtime Environment (build 1.8.0_77-b03)

Java HotSpot(TM) 64-Bit Server VM (build 25.77-b03, mixed mode)

---

Well, it turned out the Java version was the issue!

I was originally using the OpenJDK...

$ java -version

openjdk version "1.8.0_101"

OpenJDK Runtime Environment (build 1.8.0_101-b13)

OpenJDK 64-Bit Server VM (build 25.101-b13, mixed mode)

Then I downloaded and installed the Oracle Java SE...

$ java -version

java version "1.8.0_111"

Java(TM) SE Runtime Environment (build 1.8.0_111-b14)

Java HotSpot(TM) 64-Bit Server VM (build 25.111-b14, mixed mode)

Now everything works including DLUX (which was also broken before).

Previously, OpenJDK 1.7 worked with my Beryllium release.  When I updated to OpenJDK 1.8 for Boron it fails.

Great, glad that did the trick.