Re: [Savannah-hackers] [(nowhere)] Re: [gnu.org #209907] New web site docs for GNU swbis.

[Ramakrishnan Muthukrishnan]

Please see this email from address@hidden for futher investigation of the issue

- ramakrishnan


X-From-Line: address@hidden  Mon Oct  4 22:55:13 2004
Return-Path: <address@hidden>
X-Original-To: address@hidden
Delivered-To: address@hidden
Received: from localhost (localhost [127.0.0.1])
        by hackgnu.org (Postfix) with ESMTP id 0AFF51011A
        for <address@hidden>; Mon,  4 Oct 2004 22:55:11 +0530 (IST)
Received: from hackgnu.org ([127.0.0.1])
        by localhost (astra [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
        id 02248-01 for <address@hidden>;
        Mon, 4 Oct 2004 22:52:48 +0530 (IST)
Received: from localhost (localhost [127.0.0.1])
        by hackgnu.org (Postfix) with ESMTP id 2D259100FF
        for <address@hidden>; Mon,  4 Oct 2004 22:51:22 +0530 (IST)
Received: from mail.vsnl.net
        by localhost with POP3 (fetchmail-6.2.4)
        for address@hidden (single-drop); Mon, 04 Oct 2004 22:51:22 +0530 (IST)
Received: from mx1-c2.vsnl.net (mx5.vsnl.net [172.16.28.186])
 by pop3.vsnl.net (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14
 2003)) with SMTP id <address@hidden> for address@hidden; Mon,
 04 Oct 2004 03:37:02 +0530 (IST)
Received: from source ([172.16.28.149]) by mx5 ([172.16.28.186])
 with SMTP; Mon, 04 Oct 2004 03:35:29 +0530
Received: from rt.gnu.org ([199.232.76.167])
 by mx1.vsnl.net (iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003))
 with ESMTP id <address@hidden> for address@hidden; Mon,
 04 Oct 2004 03:37:02 +0530 (IST)
Received: from www-data by rt.gnu.org with local (Exim 4.34)
        id 1CEEXM-000617-K1     for address@hidden; Sun, 03 Oct 2004 18:09:00 
-0400
Date: Sun, 03 Oct 2004 18:09:00 -0400
From: "address@hidden via RT" <address@hidden>
Subject: Re: [gnu.org #209907] New web site docs for GNU swbis.
In-reply-to: <address@hidden>
Sender: www-data <address@hidden>
To: "AdminCc of gnu.org Ticket #209907": ;
Reply-To: address@hidden
Message-id: <address@hidden>
Precedence: bulk
RT-Ticket: gnu.org #209907
Managed-by: RT 3.0.8 (http://www.bestpractical.com/rt/)
RT-Originator: address@hidden
X-RT-Loop-Prevention: gnu.org
X-RT-Original-Encoding: utf-8
X-pstn-version: pmps:sps_solaris_1_1_0c0 pase:2.0
X-pstn-levels: (C:80.8653 P:95.9108 R:95.9108 S:52.0911 )
X-pstn-settings: 4 (0.2500:0.5000) p:14 m:13 C:13 r:14
X-pstn-addresses: from <address@hidden>
Original-recipient: rfc822;address@hidden
Status: O
Lines: 123
Xref: astra rt.gnu:40


REPLIES GO TO REQUESTORS BY DEFAULT.

<URL: http://rt.gnu.org/Ticket/Display.html?id=209907 >

OK, no luck yet, but I am making progress.

In summary:

I have gotten ssh to ask for the key passphrase and tell
me 'permission denied'.  I tried the same key pair on another
internal host and showed that the ssh authentication works.

---------
Here are the details:

I made a user 'jhlowe' on my machine to avoid getting ssh
credentials mixed up.  I made a new dsa key, this time 1024
bits instead of 2048. I placed the key files exactly where
the examples say.

I abandoned my expectation that CVS's use of ssh finds the
authentication agent, my mistake.  Also I moved ~/.ssh/id_dsa.pub
outside of ~/.ssh

I cut and pasted the public key from the savannah keyupdate
page to ~/.ssh/authorized_keys2 on 192.168.9.6 to test if the
key pair was correct.

I have tried cvs version 1.11.2 and 1.11.17

Here are my results:  You can see that the CVS check-out attempt
on 192.168.9.6 authenticated OK.

-bash-2.05b$ CVS_RSH=ssh /opt/cvs/bin/cvs -z3 address@hidden:/webcvs/swbis co 
swbis
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Warning: No xauth data; using fake authentication data for X11 forwarding.
Cannot access /webcvs/swbis/CVSROOT
No such file or directory

Here is my attempt at savannah about 90 minutes after updating the public key

-bash-2.05b$ CVS_RSH=ssh cvs -z3 address@hidden:/webcvs/swbis co swbis
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Permission denied (publickey,password,keyboard-interactive).
cvs [checkout aborted]: end of file from server (consult above messages if any)

Here is how ssh is being run by cvs:

000  2001 20292  5392   9   0  2856  828 pipe_w S    pts/11     0:00 cvs -z3 
address@hidden:/webcvs/swbis co swbis
000  2001 20293 20292  10   0  2980 1520 read_c S    pts/11     0:00 ssh 
savannah.gnu.org -l jhlowe cvs server

Here is attempts at using ssh directly to savannah:
(Does not authenticate)

-bash-2.05b$ ssh savannah.gnu.org -l jhlowe cvs server
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Permission denied (publickey,password,keyboard-interactive).
-bash-2.05b$ ssh -l jhlowe savannah.gnu.org cvs server
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Permission denied (publickey,password,keyboard-interactive).
-bash-2.05b$

Here is an attempt at using ssh directly to 192.168.9.6:
(Does authenticate)
-bash-2.05b$ ssh -l jhl 192.168.9.6 date
Enter passphrase for key '/home/jhlowe/.ssh/id_dsa': 
Warning: No xauth data; using fake authentication data for X11 forwarding.
Sun Oct  3 17:45:10 EDT 2004
-bash-2.05b$

here is the public key that should be in my authorized_keys2 file:
ssh-dss 
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
 address@hidden

The pubic key fingerprint is
1024 73:27:62:bf:a2:4f:62:a1:76:43:21:0b:ab:ba:56:d8 /home/jhlowe/id_dsa.pub

What's the next step?

Thanks 
Jim


On Sat, 2 Oct 2004, Ramakrishnan Muthukrishnan via RT wrote:

>  || On Fri, 01 Oct 2004 18:32:22 -0400
>  || "address@hidden via RT" <address@hidden> wrote: 
> 
>  jhlowe> I am still having problems,  CVS asks for a passphrase as if the key
>  jhlowe> based authentication does not work.
> 
>  jhlowe> What command should I expect to work?
>  jhlowe> I am using:
>  jhlowe> CVS_RSH=ssh cvs -z3 address@hidden:/webcvs/swbis co swbis
> 
>  jhlowe> Perhaps, send me a test public key, I will install it for you then
>  jhlowe> you can try this yourself?
> 
> I tried with my login 'rkrishnan' and it seem to be working:
> 
> astra:~$ CVS_RSH=ssh cvs -z3 address@hidden:/webcvs/swbis co swbis 
> Enter passphrase for key '/home/rkrishnan/.ssh/id_dsa': 
> 
> I am really clueless on what is happening. Just a double check, please go 
> through
> 
> http://savannah.gnu.org/faq/?group_id=5802&question=How_do_I_configure_my_SSH_access.txt
> 
> and 
> 
> http://www.gnu.org/server/translations/cvs_savannah.html
> 
> just to make sure that nothing is missing. I will talk to savannah-hackers 
> again about
> this and will let you know. 
> 
> Thanks
> 







-- 
    Ramakrishnan                   http://www.hackGNU.org/
    Use Free Software -- Help stamp out Software Hoarding!