cannot ssh cf apps

[fghorbel]

Hi, i try to ssh to cf apps with ssh -p 2222 diego:$(cf app machine-service --guid)/1@ssh.DOMAIN

i got diego:67996643-2578-4279-bcff-@ssh.DOMAIN's password: Permission denied, please try again.

And from ssh-proxy job of the diego_brain vm the following errors.

{"timestamp":"1496342707.673976898","source":"ssh-proxy","message":"ssh-proxy.authentication-failed","log_level":2,"data":{"error":"no auth passed yet","user":"diego:67996643-2578-4279-bcff-c4802ce7f982/1"}}
{"timestamp":"1496342710.995449066","source":"ssh-proxy","message":"ssh-proxy.diego-authenticate.authenticate-starting","log_level":1,"data":{"session":"41"}}
{"timestamp":"1496342710.997464180","source":"ssh-proxy","message":"ssh-proxy.diego-authenticate.do-request.failed-doing-request","log_level":2,"data":{"error":"Post https://bbs.service.cf.internal:8889/v1/actual_lrp_groups/get_by_process_guid_and_index: http: server gave HTTP response to HTTPS client","session":"41.1"}}
{"timestamp":"1496342711.499431849","source":"ssh-proxy","message":"ssh-proxy.diego-authenticate.do-request.failed-doing-request","log_level":2,"data":{"error":"Post https://bbs.service.cf.internal:8889/v1/actual_lrp_groups/get_by_process_guid_and_index: http: server gave HTTP response to HTTPS client","session":"41.1"}}
{"timestamp":"1496342712.001325607","source":"ssh-proxy","message":"ssh-proxy.diego-authenticate.do-request.failed-doing-request","log_level":2,"data":{"error":"Post https://bbs.service.cf.internal:8889/v1/actual_lrp_groups/get_by_process_guid_and_index: http: server gave HTTP response to HTTPS client","session":"41.1"}}
{"timestamp":"1496342712.501556635","source":"ssh-proxy","message":"ssh-proxy.diego-authenticate.building-ssh-permissions-failed","log_level":2,"data":{"error":"Post https://bbs.service.cf.internal:8889/v1/actual_lrp_groups/get_by_process_guid_and_index: http: server gave HTTP response to HTTPS client","session":"41"}}
{"timestamp":"1496342712.501711845","source":"ssh-proxy","message":"ssh-proxy.diego-authenticate.authenticate-finished","log_level":1,"data":{"session":"41"}}
{"timestamp":"1496342712.501757622","source":"ssh-proxy","message":"ssh-proxy.authentication-failed","log_level":2,"data":{"error":"Post https://bbs.service.cf.internal:8889/v1/actual_lrp_groups/get_by_process_guid_and_index: http: server gave HTTP response to HTTPS client","user":"diego:67996643-2578-4279-bcff-c4802ce7f982/1"}}

Could you please help me out to determine what is going on?.

Thank you in advance.

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/146480783

The labels on this github issue will be updated when the story is started.

[swetharepakula]

Hi @fghorbel,

Looking at the error messages it seems there is a mismatch between the ssh-proxy configuration and the bbs configuration. If your bbs does not use ssl, then make sure that ssh_proxy.bbs.require_ssl is set to false. If you do want to use ssl, make sure to set the bbs.require_ssl as well as the corresponding certs & properties with the ssh_proxy.bbs prefix.

@jvshahid && @swetharepakula