Error: remote-exec provisioner error

[wenglokc]

OS: Kali linux

I am having the following error after trying to build the attack_range. I could see both windows server and splunk instance being created and I can rdp and ssh to them. However I am unable to access the web gui for splunk and guacamole on port 8000 and 8080 respectively.

I've check some previous issue here https://github.com/splunk/attack_range/issues/737 that was similar to my error but I have verified that my ssh key generated was using rsa-2048.

[splunk-james]

What is the config for your pub and priv SSH key? Are you using an exisiting key or generating a new one each time you build? If you are using an existing key have you set permissions correctly on the private key file?

[wenglokc]

I generated a new one when I ran python attack_range.py configure

[splunk-james]

Can you share your attack_range.yml file or at least the sections relating to the SSH configs?

[wenglokc]

are you talking about this section?

[splunk-james]

What are the permissions on that private key file and there should also be another section for the key name in aws, does That match?

[wenglokc]

Are you referring to this?

[splunk-james]

That looks like the attack range default yaml file and not the one generated by running 'python attack_range.py configure'

[wenglokc]

oh you meant this