cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3944
Views
3
Helpful
4
Replies

Error Connecting to ODL Karaf

brfoster
Cisco Employee
Cisco Employee

I just installed the Boron release of ODL.  I get an error when I try to connect to the Karaf client interface.  Any pointers?

[gibson@rickenbacker bin]$ ./status

Running ...

[gibson@rickenbacker bin]$ ./client -u karaf

Logging in as karaf

539 [sshd-SshClient[7b1d7fff]-nio2-thread-1] WARN org.apache.sshd.client.session.ClientSessionImpl - Exception caught

java.security.ProviderException: java.security.KeyException

        at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:147)

        at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:703)

        at org.apache.sshd.common.kex.ECDH.getE(ECDH.java:59)

        at org.apache.sshd.client.kex.AbstractDHGClient.init(AbstractDHGClient.java:74)

        at org.apache.sshd.common.session.AbstractSession.doHandleMessage(AbstractSession.java:390)

        at org.apache.sshd.common.session.AbstractSession.handleMessage(AbstractSession.java:326)

        at org.apache.sshd.client.session.ClientSessionImpl.handleMessage(ClientSessionImpl.java:306)

        at org.apache.sshd.common.session.AbstractSession.decode(AbstractSession.java:780)

        at org.apache.sshd.common.session.AbstractSession.messageReceived(AbstractSession.java:308)

        at org.apache.sshd.common.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:54)

        at org.apache.sshd.common.io.nio2.Nio2Session$1.onCompleted(Nio2Session.java:184)

        at org.apache.sshd.common.io.nio2.Nio2Session$1.onCompleted(Nio2Session.java:170)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler$1.run(Nio2CompletionHandler.java:32)

        at java.security.AccessController.doPrivileged(Native Method)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler.completed(Nio2CompletionHandler.java:30)

        at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)

        at sun.nio.ch.Invoker.invokeDirect(Invoker.java:157)

        at sun.nio.ch.UnixAsynchronousSocketChannelImpl.implRead(UnixAsynchronousSocketChannelImpl.java:553)

        at sun.nio.ch.AsynchronousSocketChannelImpl.read(AsynchronousSocketChannelImpl.java:276)

        at sun.nio.ch.AsynchronousSocketChannelImpl.read(AsynchronousSocketChannelImpl.java:297)

        at java.nio.channels.AsynchronousSocketChannel.read(AsynchronousSocketChannel.java:420)

        at org.apache.sshd.common.io.nio2.Nio2Session.startReading(Nio2Session.java:170)

        at org.apache.sshd.common.io.nio2.Nio2Connector$1.onCompleted(Nio2Connector.java:60)

        at org.apache.sshd.common.io.nio2.Nio2Connector$1.onCompleted(Nio2Connector.java:53)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler$1.run(Nio2CompletionHandler.java:32)

        at java.security.AccessController.doPrivileged(Native Method)

        at org.apache.sshd.common.io.nio2.Nio2CompletionHandler.completed(Nio2CompletionHandler.java:30)

        at sun.nio.ch.Invoker.invokeUnchecked(Invoker.java:126)

        at sun.nio.ch.Invoker$2.run(Invoker.java:218)

        at sun.nio.ch.AsynchronousChannelGroupImpl$1.run(AsynchronousChannelGroupImpl.java:112)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at java.lang.Thread.run(Thread.java:745)

Caused by: java.security.KeyException

        at sun.security.ec.ECKeyPairGenerator.generateECKeyPair(Native Method)

        at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:128)

        ... 32 more

Authentication failed

4 Replies 4

brfoster
Cisco Employee
Cisco Employee

Update:

I found this discussion and seems to be my same issue...

https://ask.opendaylight.org/question/1524/karaf-client-failes-to-connect-to-a-server-under-linux/

Just like this person, I can SSH connect to the karaf client (see below).  However, the client script still fails with "Authentication failed".    I didn't have this issue with the previous "Beryllium" release.

[gibson@rickenbacker bin]$ ssh -p 8101 -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no karaf@localhost

Warning: Permanently added '[localhost]:8101' (RSA) to the list of known hosts.

Password authentication

Password:

    ________                       ________                .__  .__       .__     __

    \_____  \ ______   ____   ____ \______ \ _____  ___.__.|  | |__| ____ |  |___/  |_

     /   |   \\____ \_/ __ \ /    \ |    |  \\__  \<   |  ||  | |  |/ ___\|  |  \   __\

    /    |    \  |_> >  ___/|   |  \|    `   \/ __ \\___  ||  |_|  / /_/  >   Y  \  |

    \_______  /   __/ \___  >___|  /_______  (____  / ____||____/__\___  /|___|  /__|

            \/|__|        \/     \/        \/     \/\/            /_____/      \/

Hit '<tab>' for a list of available commands

and '[cmd] --help' for help on a specific command.

Hit '<ctrl-d>' or type 'system:shutdown' or 'logout' to shutdown OpenDaylight.

opendaylight-user@root>

I am running the Boron release and do not see this issue. What happens when you start karaf initially? For comparison, here is what I get:

---

ECKELCU-M-H15L:distribution-karaf-0.5.0-Boron eckelcu$ cd bin

ECKELCU-M-H15L:bin eckelcu$ ls

client                setenv

client.bat            setenv.bat

configure-cluster-ipdetect.sh    shell

configure_cluster.sh        shell.bat

custom_shard_config.txt        start

instance            start.bat

instance.bat            status

karaf                status.bat

karaf.bat            stop

set_persistence.sh        stop.bat

ECKELCU-M-H15L:bin eckelcu$ ./status

Not Running ...

ECKELCU-M-H15L:bin eckelcu$ ./karaf

karaf: Enabling Java debug options: -Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5005

Listening for transport dt_socket at address: 5005

Apache Karaf starting up. Press Enter to open the shell now...

100% [========================================================================]

Karaf started in 15s. Bundle stats: 324 active, 324 total

                                                                                          

    ________                       ________                .__  .__       .__     __      

    \_____  \ ______   ____   ____ \______ \ _____  ___.__.|  | |__| ____ |  |___/  |_    

     /   |   \\____ \_/ __ \ /    \ |    |  \\__  \<   |  ||  | |  |/ ___\|  |  \   __\   

    /    |    \  |_> >  ___/|   |  \|    `   \/ __ \\___  ||  |_|  / /_/  >   Y  \  |     

    \_______  /   __/ \___  >___|  /_______  (____  / ____||____/__\___  /|___|  /__|     

            \/|__|        \/     \/        \/     \/\/            /_____/      \/         

                                                                                          

Hit '<tab>' for a list of available commands

and '[cmd] --help' for help on a specific command.

Hit '<ctrl-d>' or type 'system:shutdown' or 'logout' to shutdown OpenDaylight.

opendaylight-user@root>

---

And then from another window I try to connect to karaf:

---

ECKELCU-M-H15L:distribution-karaf-0.5.0-Boron eckelcu$ ls

CONTRIBUTING.markdown    data            lib

LICENSE            deploy            lock

README.markdown        etc            snapshots

bin            idmlight.db.mv.db    system

cache            instances        taglist.log

configuration        journal            version.properties

ECKELCU-M-H15L:distribution-karaf-0.5.0-Boron eckelcu$ cd bin

ECKELCU-M-H15L:bin eckelcu$ ./status

Running ...

ECKELCU-M-H15L:bin eckelcu$ ./client -u karaf

Logging in as karaf

5336 [sshd-SshClient[47542153]-nio2-thread-3] WARN org.apache.sshd.client.keyverifier.AcceptAllServerKeyVerifier - Server at [/0.0.0.0:8101, RSA, 43:a9:43:de:8e:dd:90:cc:f6:4c:de:43:4a:1c:42:4b] presented unverified {} key: {}

                                                                                          

    ________                       ________                .__  .__       .__     __      

    \_____  \ ______   ____   ____ \______ \ _____  ___.__.|  | |__| ____ |  |___/  |_    

     /   |   \\____ \_/ __ \ /    \ |    |  \\__  \<   |  ||  | |  |/ ___\|  |  \   __\   

    /    |    \  |_> >  ___/|   |  \|    `   \/ __ \\___  ||  |_|  / /_/  >   Y  \  |     

    \_______  /   __/ \___  >___|  /_______  (____  / ____||____/__\___  /|___|  /__|     

            \/|__|        \/     \/        \/     \/\/            /_____/      \/         

                                                                                          

Hit '<tab>' for a list of available commands

and '[cmd] --help' for help on a specific command.

Hit '<ctrl-d>' or type 'system:shutdown' or 'logout' to shutdown OpenDaylight.

opendaylight-user@root>

---

I am also curious as to which version of Java you are using:

---

ECKELCU-M-H15L:bin eckelcu$ java -version

java version "1.8.0_77"

Java(TM) SE Runtime Environment (build 1.8.0_77-b03)

Java HotSpot(TM) 64-Bit Server VM (build 25.77-b03, mixed mode)

---

Well, it turned out the Java version was the issue!

I was originally using the OpenJDK...

$ java -version

openjdk version "1.8.0_101"

OpenJDK Runtime Environment (build 1.8.0_101-b13)

OpenJDK 64-Bit Server VM (build 25.101-b13, mixed mode)

Then I downloaded and installed the Oracle Java SE...

$ java -version

java version "1.8.0_111"

Java(TM) SE Runtime Environment (build 1.8.0_111-b14)

Java HotSpot(TM) 64-Bit Server VM (build 25.111-b14, mixed mode)

Now everything works including DLUX (which was also broken before).

Previously, OpenJDK 1.7 worked with my Beryllium release.  When I updated to OpenJDK 1.8 for Boron it fails.

Great, glad that did the trick.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: