SSH Access for the Super User

During debugging, there often is a need to access different Avi entities (such as Controllers and Service Engines). Avi Vantage includes a mechanism whereby the Controller can self-authenticate a super-user’s access to any entity in the system.

A user can attach to the Service Engine using the attach serviceengine <se_ip> command. The admin user is authenticated using a token and logs into the SE as admin. An illustration follows:

> attach serviceengine 10.10.26.42
No handlers could be found for logger "root"
Warning: Permanently added '10.10.26.42' (ECDSA) to the list of known hosts.

Avi Service Engine

Avi Networks software, Copyright (C) 2013-2017 by Avi Networks, Inc.
All rights reserved.

Version:      17.1
Date:         2017-04-08 18:03:20 UTC
Build:        5000

The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
Last login: Sat Apr  8 18:10:25 2017 from 10.10.24.160
admin@10-10-26-42:~$

Any non-admin super-user is also authenticated using tokens and logs into the SE as avidebuguser. This user also has super-user privileges on the SE.

> attach serviceengine 10.10.26.42
No handlers could be found for logger "root"
Warning: Permanently added '10.10.26.42' (ECDSA) to the list of known hosts.

Avi Service Engine

Avi Networks software, Copyright (C) 2013-2017 by Avi Networks, Inc.
All rights reserved.

Version:      17.1
Date:         2017-04-08 18:03:20 UTC
Build:        5000

The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
avidebuguser@10-10-26-42:~$