Skip to main content Skip to complementary content

Configuring SSH access

Configure SSH access for Talend Remote Engine to change the SSH password or allow SSH connections from remote machines.

Changing the SSH password

Change the SSH password for the default Talend Remote Engine user to enable secure access to the Karaf console and other tools.

About this task

Change the SSH password in the following situations:

  • You need to connect to the Karaf console or extract a Karaf dump through RE-helper, a utility for generating a support bundle for engine troubleshooting.
  • You do not have the password that was generated during installation or during first startup:
    • For installer-based installations since v2.13.13, a random SSH password is generated during installation and printed to the console. For more information, see Installing the Remote Engine automatically.
    • For archive-based installations since v2.14.1, a random SSH password is generated on the first engine startup and printed to the console in the following format:
      default engine password 'tadmin' has been replaced with <generated-password>
  • You are using tadmin as the default SSH password (installer-based installations before v2.13.13, or archive-based installations before v2.14.1). For security reasons, change the default password.

Procedure

  1. Open the <RemoteEngineInstallationDirectory>/etc/users.properties file in a text editor.
  2. Locate the line for the default user.
    Password state Line format
    Not yet encrypted tadmin = tadmin,_g_:admingroup
    Already encrypted tadmin = {CRYPT}212E67DAB3D7355B2BC74F76B59213EAA9F021955B26F2158E6D6F1A653089ECDDF6A12AEE229CF1{CRYPT},_g_:admingroup
  3. Replace the password value with a new strong password.

    In both cases, replace the password field, whether plain text or the {CRYPT}...{CRYPT} block, with your new plain text password.

  4. Save the file.

    If the engine is running when you make this change, the password is automatically encrypted after saving. Otherwise, the encryption occurs when the engine starts. For example:

    tadmin = {CRYPT}6BA00DCABFDDDE0F9A96B4CA68C13DBEE23597E5925656680C501889C4A554604201B37069754392{CRYPT},_g_:admingroup

Results

The SSH password is updated. Use it for tasks like connecting to the Karaf console or extracting Karaf dumps.

Enabling remote access to Talend Remote Engine using SSH (optional)

By default, only localhost has SSH access to Talend Remote Engine. To enable remote access from other machines, change the SSH host binding in the configuration file.

Procedure

  1. Open the <RemoteEngineInstallationDirectory>/etc/org.apache.karaf.shell.cfg file.
    By default, the sshHost value is set to localhost.
  2. Change the sshHost value to 0.0.0.0.
  3. Save the file.

Results

You can now connect to Talend Remote Engine from other machines using SSH.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – please let us know!