mainSavannah Administration - Support: sr #106402, Permission denied (publickey).

 
 

sr #106402: Permission denied (publickey).

Submitter:  Dimitris Papavasiliou <dpapavas>
Submitted:  Wed 11 Jun 2008 09:44:21 PM UTC
   
 
Category:  Source code repositories - developer access Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  mjflick
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 12 Jun 2008 08:06:46 PM UTC, comment #3: 

Hi,

Your key is vulnerable. See
https://savannah.gnu.org/forum/forum.php?forum_id=5321 for details.

For admins:
/home/d/dp/dpapavas/.ssh# ssh-vulnkey authorized_keys
COMPROMISED: 1024 df:27:ae:4d:48:26:31:0b:f6:5c:36:9d:c7:21:9b:8e dimitris@debian

Our Debian system blocks SSH access from vulnerable keys, to avoid crackers from exploiting them (it's a matter of 20mn).

So you need to regenerate your key from an up-to-date system, and replace it everywhere.

Sylvain Beucler <Beuc>
Thu 12 Jun 2008 07:43:00 PM UTC, comment #2: 

Well, as I've said, I have waited more than an hour before trying to check out the page.  I've tried regenerating my keys now in case I've screwed up somewhere on my first attempt.  I've updated the key on savannah maybe an hour and a half ago and I still can't authenticate.  I've tried copy pasting my ssh key from the savannah form back to a file and comparing it with diff against ~/.ssh/id_dsa.pub.  They're identical.  The output from the commands:

cvs -z3 -d:ext:dpapavas@cvs.sv.gnu.org:/webcvs/billiards co billiards
ssh -v -email is unavailable-

looks identical to what I have already posted.  I don't know what else to try.

Dimitris

Dimitris Papavasiliou <dpapavas>
Thu 12 Jun 2008 06:02:27 PM UTC, comment #1: 

When you update your ssh key it's not instantaneous, you have to wait a little for the key to be updated in our system.


Anyways, it should work now.  Try again and let us know how it goes.

Michael J. Flickinger <mjflick>
Wed 11 Jun 2008 09:44:21 PM UTC, original submission:  

Hello,

I'm having trouble checking out my web page via cvs (for the first time).  I'm pretty sure my public key doesn't contain any newlines and it's been more than an hour since I've updated it.  Output from the relevant commands follow:

-------

Permission denied (publickey).
cvs [checkout aborted]: end of file from server (consult above messages if any)

-------

OpenSSH_4.7p1 Debian-4, OpenSSL 0.9.8g 19 Oct 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to cvs.savannah.nongnu.org [199.232.41.69] port 22.
debug1: Connection established.
debug1: identity file /home/dimitris/.ssh/identity type -1
debug1: identity file /home/dimitris/.ssh/id_rsa type -1
debug1: identity file /home/dimitris/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2 Debian-9etch2
debug1: match: OpenSSH_4.3p2 Debian-9etch2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.7p1 Debian-4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'cvs.savannah.nongnu.org' is known and matches the RSA host key.
debug1: Found key in /home/dimitris/.ssh/known_hosts:18
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/dimitris/.ssh/identity
debug1: Trying private key: /home/dimitris/.ssh/id_rsa
debug1: Offering public key: /home/dimitris/.ssh/id_dsa
debug1: Authentications that can continue: publickey
debug1: No more authentication methods to try.
Permission denied (publickey).

Dimitris.

Dimitris Papavasiliou <dpapavas>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by Beuc (Posted a comment)
  • -email is unavailable- added by mjflick (Posted a comment)
  • -email is unavailable- added by dpapavas (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-06-12 Beuc StatusIn Progress Done
        Open/ClosedOpen Closed
    2008-06-12 mjflick StatusNone In Progress
        Assigned toNone mjflick

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code