mainSavannah Administration - Support: sr #104539, Anonymous CVS now requires password

 
 

sr #104539: Anonymous CVS now requires password

Submitter:  Greg Chicares <chicares>
Submitted:  Tue 09 Aug 2005 04:55:13 PM UTC
   
 
Category:  Source code repositories - anonymous access Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  Beuc
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Thu 11 Aug 2005 06:49:12 PM UTC, comment #18: 

It's working now, thanks.

spiralvoice <spiralvoice>
Thu 11 Aug 2005 05:36:23 PM UTC, comment #17: 

Good to see it solve; weird issue though.

Sylvain Beucler <Beuc>
Thu 11 Aug 2005 06:34:24 AM UTC, comment #16: 

It's working now, thanks.

Mikael Magnusson <mikma>
Thu 11 Aug 2005 06:22:07 AM UTC, comment #15: 

No, I meant I changed the server with those options, not the client. It should work without configuring the client.

Sylvain Beucler <Beuc>
Thu 11 Aug 2005 12:53:34 AM UTC, comment #14: 

Putting only

PasswordAuthentication no

into $HOME/.ssh/config did the trick, thanks!

spiralvoice <spiralvoice>
Wed 10 Aug 2005 11:36:20 PM UTC, comment #13: 

I installed MSys and made some tests; apparently UsePAM=yes + EnablePasswordAuthentication=No does the trick. Ok for you?

Sylvain Beucler <Beuc>
Wed 10 Aug 2005 10:59:31 PM UTC, comment #12: 

I'm experiencing the same problem. I can't update cvs checkouts that have worked before.

$ ssh -v -email is unavailable-
OpenSSH_3.8.1p1 Debian-8.sarge.4, OpenSSL 0.9.7e 25 Oct 2004
debug1: Reading configuration data /home/XXX/.ssh/config
debug1: Applying options for savannah.gnu.org
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to savannah.gnu.org [199.232.41.3] port 22.
debug1: Connection established.
debug1: identity file /usb/id_rsa type -1
debug1: identity file /usb/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/XXX/.ssh/known_hosts:28
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Offering public key: XXX
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: XXX
debug1: Trying private key: XXX
debug1: Next authentication method: password
anoncvs@savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
debug1: No more authentication methods to try.
Permission denied (publickey,password).

$ cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
  -> parse_cvsroot ( :ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi )
  -> main loop with CVSROOT=:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi
  -> safe_location( where=(null) )
 -> Starting server: ssh -l anoncvs savannah.nongnu.org cvs server
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied (publickey,password).
cvs [checkout aborted]: end of file from server (consult above messages if any)

Mikael Magnusson <mikma>
Wed 10 Aug 2005 10:58:38 PM UTC, comment #11: 

$ cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/mldonkey co -P mldonkey
cvs checkout: notice: main loop with CVSROOT=:ext:anoncvs@savannah.nongnu.org:/cvsroot/mldonkey
 -> Starting server: ssh savannah.nongnu.org -l anoncvs cvs server
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied (publickey,password).
cvs [checkout aborted]: end of file from server (consult above messages if any)

spiralvoice <spiralvoice>
Wed 10 Aug 2005 10:57:10 PM UTC, comment #10: 

$ ssh -v -email is unavailable-
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 500 geteuid 500 anon 1
debug1: Connecting to savannah.gnu.org [199.232.41.3] port 22.
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/user/.ssh/identity type -1
debug1: identity file /home/user/.ssh/id_rsa type -1
debug1: identity file /home/user/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.9p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 110/256
debug1: bits set: 1062/2048
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
The authenticity of host 'savannah.gnu.org (199.232.41.3)' can't be established.
RSA key fingerprint is 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'savannah.gnu.org,199.232.41.3' (RSA) to the list of known hosts.
debug1: bits set: 1021/2048
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password
debug1: next auth method to try is publickey
debug1: try privkey: /home/user/.ssh/identity
debug1: try privkey: /home/user/.ssh/id_rsa
debug1: try privkey: /home/user/.ssh/id_dsa
debug1: next auth method to try is password
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password
debug1: no more auth methods to try
Permission denied (publickey,password).
debug1: Calling cleanup 0x41bcc4(0x0)

spiralvoice <spiralvoice>
Wed 10 Aug 2005 10:54:38 PM UTC, comment #9: 

No, its getting worse now.

anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied (publickey,password).
cvs [checkout aborted]: end of file from server (consult above messages if any)

spiralvoice <spiralvoice>
Wed 10 Aug 2005 09:51:27 PM UTC, comment #8: 

Hello,

I turned off 'ChallengeResponseAuthentication' in the configuration. Does this help?

Sylvain Beucler <Beuc>
Wed 10 Aug 2005 06:53:48 PM UTC, comment #7: 

Having the same problem here, also with MSYS/MinGW on Windows.
The same old SSH version is working here, but pressing
Enter three times when asked for the password worked here.

spiralvoice <spiralvoice>
Tue 09 Aug 2005 08:11:55 PM UTC, comment #6: 

Thank you. I believe I should upgrade ssh. But let me
answer your other question anyway, just in case that's
helpful:

$ cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
cvs checkout: notice: main loop with CVSROOT=:ext:anoncvs@savannah.nongnu.org:/c
vsroot/lmi
 -> Starting server: ssh savannah.nongnu.org -l anoncvs cvs server
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
S-> do_module (lmi, Updating, , )
S-> do_module (lmi, Updating, , )
 -> unlink(CVS/Entries.Static)
cvs server: Updating lmi
S-> unlink_file(./CVS/Entries.Static)
S-> rename(CVS/Entries.Backup,CVS/Entries)
S-> unlink_file(CVS/Entries.Log)
S-> unlink_file(skeleton/CVS/Entries.Static)
 -> unlink(CVS/Entries.Static)
cvs server: Updating lmi/skeleton
S-> rename(CVS/Entries.Backup,CVS/Entries)
S-> unlink_file(CVS/Entries.Log)
S-> unlink_file(skeleton/CVS/Entries.Static)
 -> unlink(CVS/Entries.Static)
cvs server: Updating lmi/skeleton/skeleton
S-> rename(CVS/Entries.Backup,CVS/Entries)
S-> unlink_file(CVS/Entries.Log)

$ ssh -v -email is unavailable-
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Reading configuration data /home/chicares/.ssh/config
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 500 geteuid 500 anon 1
debug1: Connecting to savannah.gnu.org [199.232.41.3] port 22.
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/chicares/.ssh/id_rsa type -1
debug1: identity file /home/chicares/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Deb
ian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.9p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 123/256
debug1: bits set: 1012/2048
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/chicares/.ssh/known_hosts2:2
debug1: bits set: 979/2048
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: next auth method to try is publickey
debug1: try privkey: /home/chicares/.ssh/id_rsa
debug1: try pubkey: /home/chicares/.ssh/id_dsa
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: next auth method to try is password
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: next auth method to try is keyboard-interactive
debug1: ssh-userauth2 successful: method keyboard-interactive
debug1: channel 0: new [client-session]
debug1: channel_new: 0
debug1: send channel open 0
debug1: Entering interactive session.
debug1: client_init id 0 arg 0
debug1: channel request 0: shell
debug1: channel 0: open confirm rwindow 0 rmax 32768
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: channel 0: rcvd eof
debug1: channel 0: output open -> drain
debug1: channel 0: rcvd close
debug1: channel 0: input open -> closed
debug1: channel 0: close_read
debug1: channel 0: obuf empty
debug1: channel 0: output drain -> closed
debug1: channel 0: close_write
debug1: channel 0: send close
debug1: channel 0: is dead
debug1: channel_free: channel 0: status: The following connections are open:
  #0 client-session (t4 r0 i8/0 o128/0 fd -1/-1)

debug1: channel_free: channel 0: dettaching channel user
Connection to savannah.gnu.org closed.
debug1: Transferred: stdin 0, stdout 0, stderr 40 bytes in 0.5 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 88.3
debug1: Exit status 0


Greg Chicares <chicares>
Tue 09 Aug 2005 08:02:29 PM UTC, comment #5: 

Hello.

Your version of SSH is about 3 years old, so upgrading it is likely to fix the issue.

If that still doesn't work, can you then provide me the output of:
ssh -v -email is unavailable-
cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
?

Sylvain Beucler <Beuc>
Tue 09 Aug 2005 07:36:33 PM UTC, comment #4: 

ssh version:

$ ssh -V
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f

platform: ms windows xp; the shell, cvs, and ssh are all
part of MSYS:
  http://mingw.org/msys.shtml

ssh known hosts (I have only 'known_hosts2' with '2' on
the end:)

$ cat .ssh/known_hosts2
subversions.gnu.org,199.232.41.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFQovi+67xa
+wymRz9u3plx0ntQnELBoNU4SCl3RkwSFZkrZsRTC0fTpOKatQNs1r/BLFoVt21oVFwIXVevGQwB+Lf0
Z+5w9qwVAQNu/YUAFHBPTqBze4wYK/gSWqQOLoj7rOhZk0xtAS6USqcfKdzMdRWgeuZ550P6gSzEHfv0
=
savannah.gnu.org ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFQovi+67xa+wymRz9u3plx0ntQ
nELBoNU4SCl3RkwSFZkrZsRTC0fTpOKatQNs1r/BLFoVt21oVFwIXVevGQwB+Lf0Z+5w9qwVAQNu/YUA
FHBPTqBze4wYK/gSWqQOLoj7rOhZk0xtAS6USqcfKdzMdRWgeuZ550P6gSzEHfv0=
savannah.nongnu.org,199.232.41.4 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFQovi+67xa
+wymRz9u3plx0ntQnELBoNU4SCl3RkwSFZkrZsRTC0fTpOKatQNs1r/BLFoVt21oVFwIXVevGQwB+Lf0
Z+5w9qwVAQNu/YUAFHBPTqBze4wYK/gSWqQOLoj7rOhZk0xtAS6USqcfKdzMdRWgeuZ550P6gSzEHfv0
=

> I would also like you to try typing different passwords
> several times.


I tried 'foo': it fails twice, then works the third time.
I repeated that process for three cycles, and it always
works the third time only.

I get exactly the same behavior with 'anoncvs', and also
with 'password'.

I get exactly the same behavior if I type 'a', then 'b',
then 'c': the third time, it works. Even if I type nothing
and only hit the Enter key, it works the third time.

Greg Chicares <chicares>
Tue 09 Aug 2005 07:13:38 PM UTC, comment #3: 


> Is there anything else you would like me to test?


Yes, I would like to get your version of SSH and your platform. I suspect some compatibility issue, because I still can't reproduce the issue. We upgraded our version of SSH, so that might be the problem.

I would also like you to try typing different passwords several times. There is no password, the password is empty, it is not 'password' more than anything else. Maybe when you type a random combination it gives you the access in the end.

Last, could you also give me your .ssh/known_hosts entry about savannah.nongnu.org. We never know...

Sylvain Beucler <Beuc>
Tue 09 Aug 2005 06:54:18 PM UTC, comment #2: 


> Do you still experience the issue?


Yes, I reproduced it just now. <wboutin> told me she
discovered the same issue this morning; she said that
'anoncvs' was accepted as a password, and then everything
worked normally.

I've been running exactly the same command many times
a day for months, and haven't changed my cvs software.

> We didn't change anything regarding anoncvs, and I
> cannot reproduce the error.


Here are the exact steps I took to reproduce it here.
I started a new bash instance and copied and pasted the
commands shown here
  https://savannah.nongnu.org/cvs/?group=lmi
only changing 'co <modulename>' to 'update':

$ pwd
/c/tmp/eraseme

$ export CVS_RSH="ssh"

$ cvs -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi update
anoncvs@savannah.nongnu.org's password:
[I typed 'savannah': no good]
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
[I typed 'anoncvs': no good]
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
[I typed 'password': that worked]
cvs update: in directory .:
cvs [update aborted]: there is no version here; run 'cvs checkout' first

I tried 'checkout', but that asks for a password too:

$ cvs -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
anoncvs@savannah.nongnu.org's password:

Is there anything else you would like me to test?

Greg Chicares <chicares>
Tue 09 Aug 2005 05:34:15 PM UTC, comment #1: 

Do you still experience the issue? We didn't change anything regarding anoncvs, and I cannot reproduce the error.

Sylvain Beucler <Beuc>
Tue 09 Aug 2005 04:55:13 PM UTC, original submission:  

This has always worked for me, without any password:

  $ export CVS_RSH="ssh"
  $ cvs -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi update

but today I started getting this response:

  anoncvs@savannah.nongnu.org's password:

Is this a deliberate change? It seems to work if I type
'password'.

Greg Chicares <chicares>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Follow 4 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-08-11 Beuc StatusNone Done
    Open/ClosedOpen Closed
2005-08-09 Beuc Assigned toNone Beuc
2005-08-09 chicares Carbon-Copy- Added wboutin

Back to the top

Powered by Savane 3.13-f8d8.
Corresponding source code