Attach to the Serviceengine from CLI using Remote User Credentials fails with Connection Refused Error

Products

• VMware Avi Load Balancer

Issue/Introduction

A remote-auth user currently may access the CLI by opening an ssh client as cli@<Avi Controller IP>. However this user cannot attach to the serviceengine and access the serviceengine VM using the command "attach serviceengine <se-name>"

Environment

Avi versions - 22.1.x, 30.1.x, 30.2.x

Cause

This is currently a limitation on the product. Attach serviceengine won't work from within the CLI container as ssh reverse port forwarding rules are not configured within the container.

Resolution

There is a workaround that can be used by remote auth users provided these are Super-user (Enabled in User-Profile).

Workaround:

• • Login to the shell via cli@<controller-ip> with Remote user creds (Note: This user has to be a super-user)

  • Run the command "attach controller <controller-ip/hostname>" which will provide the Controller container access as "avidebuguser".

  • Type, "shell" and provide credentials for the Remote user

  • Run the command "attach serviceengine <se-name>"