mainSavannah Administration - Support: sr #106183, Permission denied (publickey)

 
 

sr #106183: Permission denied (publickey)

Submitter:  Sanjay Jaiman <sjaiman>
Submitted:  Thu 10 Jan 2008 09:37:12 PM UTC
   
 
Category:  Source code repositories - developer access Priority:  5 - Normal
Severity:  4 - Important Status:  Done
Privacy:  Public Assigned to:  Beuc
Operating System:  GNU/Linux Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Sat 12 Jan 2008 05:45:10 PM UTC, comment #2: 

I think you do not use the appropriate commands. In particular:

- 'pserver' is for read-only access (only with user 'anonymous')

- you do not have a SSH full shell, you can only use CVS. So scp and login won't work.

Sylvain Beucler <Beuc>
Sat 12 Jan 2008 12:12:53 AM UTC, comment #1: 

After exploring some more, I realized that I have to login as admin & set the "rsa" & "dsa" public keys for CVS access.  I generated the "rsa" & "dsa" keys on my system & put the public keys in.  I seem to get further but still not able to access CVS with write access.  I tried "cvs checkout", "ssh" to "cvs.savannah.gnu.org" but to no avail.  Here is what I tried & the output -

bash-3.00$ cvs -z3 -d:pserver:sjaiman@cvs.savannah.nongnu.org:/sources/tlvcomm co tlvcomm
cvs checkout: authorization failed: server cvs.savannah.nongnu.org rejected access to /sources/tlvcomm for user sjaiman
cvs checkout: used empty password; try "cvs login" with a real password
bash-3.00$ ssh -v -email is unavailable-
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to cvs.savannah.gnu.org [199.232.41.69] port 22.
debug1: Connection established.
debug1: identity file /home/sjaiman/.ssh/identity type -1
debug1: identity file /home/sjaiman/.ssh/id_rsa type 1
debug1: identity file /home/sjaiman/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2 Debian-9
debug1: match: OpenSSH_4.3p2 Debian-9 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
The authenticity of host 'cvs.savannah.gnu.org (199.232.41.69)' can't be established.
RSA key fingerprint is 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'cvs.savannah.gnu.org' (RSA) to the list of known hosts.
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/sjaiman/.ssh/identity
debug1: Offering public key: /home/sjaiman/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Offering public key: /home/sjaiman/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 433
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Enter passphrase for key '/home/sjaiman/.ssh/id_dsa':
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
You tried to execute:
Sorry, you are not allowed to execute that command.
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: channel 0: free: client-session, nchannels 1
Connection to cvs.savannah.gnu.org closed.
debug1: Transferred: stdin 0, stdout 0, stderr 44 bytes in 0.2 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 287.1
debug1: Exit status 1
bash-3.00$ ssh -v sjaiman@cvs.savannah.gnu.org/sources/tlvcomm
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
ssh: cvs.savannah.gnu.org/sources/tlvcomm: Name or service not known
bash-3.00$
bash-3.00$
bash-3.00$ ssh -v sjaiman@cvs.savannah.gnu.org:/sources/tlvcomm
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
ssh: cvs.savannah.gnu.org:/sources/tlvcomm: Name or service not known
bash-3.00$ ssh -v sjaiman@cvs.savannah.gnu.org                
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to cvs.savannah.gnu.org [199.232.41.69] port 22.
debug1: Connection established.
debug1: identity file /home/sjaiman/.ssh/identity type -1
debug1: identity file /home/sjaiman/.ssh/id_rsa type 1
debug1: identity file /home/sjaiman/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2 Debian-9
debug1: match: OpenSSH_4.3p2 Debian-9 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'cvs.savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/sjaiman/.ssh/known_hosts:2
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/sjaiman/.ssh/identity
debug1: Offering public key: /home/sjaiman/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Offering public key: /home/sjaiman/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 433
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Enter passphrase for key '/home/sjaiman/.ssh/id_dsa':
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
Last login: Fri Jan 11 23:57:01 2008 from 12.6.244.2
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: channel 0: forcing write
You tried to execute:
Sorry, you are not allowed to execute that command.
debug1: channel 0: free: client-session, nchannels 1
Connection to cvs.savannah.gnu.org closed.
debug1: Transferred: stdin 0, stdout 0, stderr 44 bytes in 0.2 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 280.9
debug1: Exit status 1
bash-3.00$ pwd
/home/sjaiman/savannah
bash-3.00$ ls
bash-3.00$ cp ../tlvcomm.tgz .
bash-3.00$
bash-3.00$
bash-3.00$ scp -v tlvcomm.tgz sjaiman@cvs.savannah.gnu.org:/sources/tlvcomm/.
Executing: program /usr/bin/ssh host cvs.savannah.gnu.org, user sjaiman, command scp -v -t /sources/tlvcomm/.
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to cvs.savannah.gnu.org [199.232.41.69] port 22.
debug1: Connection established.
debug1: identity file /home/sjaiman/.ssh/identity type -1
debug1: identity file /home/sjaiman/.ssh/id_rsa type 1
debug1: identity file /home/sjaiman/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2 Debian-9
debug1: match: OpenSSH_4.3p2 Debian-9 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'cvs.savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/sjaiman/.ssh/known_hosts:2
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/sjaiman/.ssh/identity
debug1: Offering public key: /home/sjaiman/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Offering public key: /home/sjaiman/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 433
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Enter passphrase for key '/home/sjaiman/.ssh/id_dsa':
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Sending command: scp -v -t /sources/tlvcomm/.
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
You tried to execute: scp -v -t /sources/tlvcomm/.
Sorry, you are not allowed to execute that command.
debug1: channel 0: free: client-session, nchannels 1
debug1: fd 0 clearing O_NONBLOCK
debug1: fd 1 clearing O_NONBLOCK
debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 0.1 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.0
debug1: Exit status 1
lost connection
bash-3.00$

Sanjay Jaiman <sjaiman>
Thu 10 Jan 2008 09:37:12 PM UTC, original submission:  

I have seen past SR with similar problems..  I am trying to update the sources for "tlvcomm" project and am getting "permission denied".  My suspicion is that I am not supplying the correct passphrase while trying to ssh.  Here is what I have tried so far -

bash-3.00$ cvs -z3 -d:ext:sjaiman@cvs.savannah.nongnu.org:/sources/tlvcomm co tlvcomm
Permission denied (publickey).
cvs [checkout aborted]: end of file from server (consult above messages if any)



bash-3.00$ ssh -v -email is unavailable-
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to cvs.savannah.gnu.org [199.232.41.69] port 22.
debug1: Connection established.
debug1: identity file /home/sjaiman/.ssh/identity type -1
debug1: identity file /home/sjaiman/.ssh/id_rsa type -1
debug1: identity file /home/sjaiman/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2 Debian-9
debug1: match: OpenSSH_4.3p2 Debian-9 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'cvs.savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/sjaiman/.ssh/known_hosts:2
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/sjaiman/.ssh/identity
debug1: Trying private key: /home/sjaiman/.ssh/id_rsa
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/sjaiman/.ssh/id_rsa' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: /home/sjaiman/.ssh/id_rsa
Enter passphrase for key '/home/sjaiman/.ssh/id_rsa':
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/sjaiman/.ssh/id_rsa' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: /home/sjaiman/.ssh/id_rsa
Enter passphrase for key '/home/sjaiman/.ssh/id_rsa':
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/sjaiman/.ssh/id_rsa' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: /home/sjaiman/.ssh/id_rsa
Enter passphrase for key '/home/sjaiman/.ssh/id_rsa':
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/sjaiman/.ssh/id_rsa' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: /home/sjaiman/.ssh/id_rsa
debug1: Trying private key: /home/sjaiman/.ssh/id_dsa
debug1: No more authentication methods to try.
Permission denied (publickey).
bash-3.00$


Sanjay Jaiman <sjaiman>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by Beuc (Posted a comment)
  • -email is unavailable- added by sjaiman (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-01-12 Beuc StatusNone Done
        Assigned toNone Beuc
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code