[cisco-voip] Error when SSHing into CUCM 10.5

[Ryan Huff]

Jonathan, were you able to get traction on this with TAC? Curious to see how it was resolved (if it was yet).
 
Thanks,
 
Ryan
 
Date: Thu, 3 Sep 2015 14:43:38 -0500
Subject: Re: [cisco-voip] Error when SSHing into CUCM 10.5
From: jonvoip at gmail.com
To: ryanhuff at outlook.com
CC: cisco-voip at puck.nether.net

I am able to login to the OS Admin page with that account... so I should be able to make a remote support account and get tac to fix this...
Thanks!

Jonathan
On Thu, Sep 3, 2015 at 2:02 PM, Ryan Huff <ryanhuff at outlook.com> wrote:



Also, if you are able to login into OS Administration (GUI) with the platform administrator account, but just can't SSH then you may be missing the /etc/selinux/targeted/contexts/users/sshout_u file. If you can get into the root account (had it previously enabled before the failed patch), you can create the sshout_u file and base it off of etc/selinux/targeted/contexts/users/guest_u

You may have to recover the OS though, if you can't get into root. I'd raise a TAC case and let them do it if it is a production system.

*** DISCLAIMER ***

I am not endorsing or recommending you to do anything I have described in this message. This is for educational purposes only.

From: ryanhuff at outlook.com
To: jonvoip at gmail.com; cisco-voip at puck.nether.net
Date: Thu, 3 Sep 2015 14:45:55 -0400
Subject: Re: [cisco-voip] Error when SSHing into CUCM 10.5




So this is less a CUCM error as it is actually an issue with RedHat (OS). Basically, your platform administrator account is roached (doesn't have the right permissions) and when you try to log in -SELinux is spanking you. 

When you installed the patch, did you install with out a switch-version or with a switch-version? When it failed; di you reboot the cluster after the failure? Was this the publisher that is failed on?

Thanks,

Ryan


Date: Thu, 3 Sep 2015 13:34:21 -0500
From: jonvoip at gmail.com
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] Error when SSHing into CUCM 10.5

Unable to get valid context for administrator
Last login: Thu Sep  3 11:09:07 2015 from 10.10.55.33
Had a failed patch from 10.5.2.11900 to 12901... switched back and everything appears to work, but can't SSH into the host.
Google is devoid of results...


Jonathan


_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip 		 	   		  

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip 		 	   		  

 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20150904/59d7ea53/attachment.html>