After reinstalling OH2.5M5 on openHABian I now have to provide credentials for running openhab-cli console

[shutterfreak (Olivier Biot)]

@rlkoshak

Try to think of the Karaf Console as a completely separate machine. The user accounts that exists on your Raspberry Pi are completely irrelevant, just as your Windows accounts don’t matter when you use PuTTY to access your RPi over the network.

All that matters is that the Karaf user openhab is given a public key and what ever you are logging in to the Karaf console from possesses the private key.

Thanks for your clear explanation.

So in fact I need to distribute the keys to whichever account in need of accessing the Karaf console.

To this end I just created a new set of keys named karaf_openhab_id.rsa and karaf_openhab_id.rsa.pub which are only used for logging into Karaf:

1. from the openhabian user account (the regular openhab-cli console access which now always requires a password), and
2. from the openhab user account (useful e.g. for restarting bindings in case of problems).

As long as I explicitly provide the name of the private key in either case, it now works.

For what it’s worth, I couldn’t find any override in /usr/bin/openhab-cli nor in the scripts it runs:

1. /etc/profile.d/openhab2.sh
2. /etc/default/openhab2
   (NOTES:
   1. I have the impression that EXTRA_JAVA_OPTS was reset to the default value (EXTRA_JAVA_OPTS="-Xms250m -Xmx350m") after upgrading from 2.5 M4 to 2.5 M5 so I had to re-add the JSR223/Jython specific extra options for my Jython rules to work again)
3. /etc/openhab-cli/command-overrides.sh