Re: [Xen-API] Unable to move VMs between XCP hosts? odd.

["Michael @ Professional Edge LLC" <m3@xxxxxxxxxxxxxxxxxxxxxxx>]

Evgeniy,

Well it wasn't a problem with /etc/securetty.  But you got me thinking 
in the right direction! THANK YOU!
One of my folks had installed a pam module - to restrict access to login 
to root - except from a specific set of internal IP addresses.
Somehow this:
/etc/pam.d/system-auth
##################
account     required      pam_access.so
##################

/etc/security/access.conf
##################
+ : root : 10.0.0.0/8 127.0.0.1
- : root : ALL
##################

Blocks all ability to login to ROOT ( including SU ) - when there is no 
IP address configured on the Interfaces ( which of course happens by 
default when you import the VM ).
The moment there is a IP on the primary NIC - everything works properly 
again.
So procedurally - I will do the following going forward.

1. EDIT - /etc/pam.d/system-auth ( DELETE the line - "account 
required      pam_access.so" )
2. Export the VM from source XCP Host.
3. Import the VM from the VDI file into the target XCP Host.
4. Login configure IPs on the imported VM
5. Re-ADD the PAM line deleted in Step#1.

Hope this chatter helps someone else in the future.

-Michael


Evgeniy Chupriyanov wrote on 6/4/2013 4:52 AM:
> 04.06.2013, в 12:06, Michael @ Professional Edge LLC <m3@xxxxxxxxxxxxxxxxxxxxxxx> 
> написал(а):
>
> > XCP 1.6 - new Host #3 deployed last week - every VM I export from Host#1 or 
> > Host#2 - imports fine... but I'm unable to login, after a successful import.
> >
> > ================================================
> > [root@host3 ~]# xe console vm=test1
> > ...
> > Kernel 2.6.18-308.1.1.el5xen on an x86_64
> >
> > (test1.FQDN) login: root
> > Password:
> >
> > Permission denied
> > ================================================
> Looks like console device name (/dev/console or /dev/xvc0) is missing from 
> /etc/securetty
> You can login as usual (non-root) user, than su to root and add correct dev 
> name to /etc/securetty
>
>
>
> _______________________________________________
> Xen-api mailing list
> Xen-api@xxxxxxxxxxxxx
> http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api

_______________________________________________
Xen-api mailing list
Xen-api@xxxxxxxxxxxxx
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api