HOW TO: Configure EMC XtremIO user with Public Key authentication

EMC XtremIO array supports two types of authentication for internal users:

  • password
  • public key

In case the user account is used to run scripts and you don’t want to expose the password, using public key authentication would be the preferred method.

In the following example we will configure Linux user to connect to XtremIO:

  1. Login as the user and locate user’s public key:
    login as: grid
    grid@oracle01n01's password:
    grid@oracle01n01:+ASM1:~> cd ~/.ssh
    grid@oracle01n01:+ASM1:~/.ssh> ls -ltr
    total 16
    -rw-r--r-- 1 grid oinstall 420 Apr 24 14:52   <--- Public Key
    -rw------- 1 grid oinstall 1675 Apr 24 14:52 id_rsa
    -rw-r--r-- 1 grid oinstall 840 Apr 24 14:52 authorized_keys
    -rw-r--r-- 1 grid oinstall 2845 Apr 30 10:58 known_hosts
  2. Copy the user’s public key (content of file) to the clipboard:
    grid@oracle01n01:+ASM1:~/.ssh> cat
    7jiwZQZNPJkvEjagLiQ== grid@oracle01n01.vstrong.local
  3. Open XtremIO Storage Management Application, Administration, Security, Users Administration, Add
    Select appropriate user role (Administrator, Configuration, Read-Only)
    Select By Public Key and paste the user’s public key into the window.
    EMC XtremIO Add New User Public Key
    Click OK.
  4. Test the user can connect to the storage array
    grid@oracle01n01:+ASM1:/> ssh grid@xio01 "show-volumes"
    Volume-Name Index Vol-Size LB-Size VSG-Space-In-Use Offset Ancestor-Name Index VSG-Index Cluster-Name Index Parent-Folder-Name Index Small-IO-Alerts Unaligned-IO-Alerts VAAI-TP-Alerts Total-Writes Total-Reads Certainty-State
    SRM_PLACEHOLDER 10 2G 512 5.383M 0 10 xio01 1 /CLUSTER06/CLUSTER06-DATA 4 disabled disabled disabled 67.354M 5.451G ok

Hope this will help.

1 comment to HOW TO: Configure EMC XtremIO user with Public Key authentication

Leave a Reply

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>




This site uses Akismet to reduce spam. Learn how your comment data is processed.