helpSavannah Administration - Support: sr #104539, Anonymous CVS now requires password

 
 

sr #104539: Anonymous CVS now requires password

Submitted by:  Greg Chicares <chicares>
Submitted on:  Tue 09 Aug 2005 04:55:13 PM UTC  
 
Category: Source code repositories - anonymous accessPriority: 5 - Normal
Severity: 3 - NormalStatus: Done
Assigned to: Sylvain Beucler <Beuc>Operating System: None
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Thu 11 Aug 2005 06:49:12 PM UTC, comment #18:

It's working now, thanks.

spiralvoice <spiralvoice>
Thu 11 Aug 2005 05:36:23 PM UTC, comment #17:

Good to see it solve; weird issue though.

Sylvain Beucler <Beuc>In charge of this item.
Thu 11 Aug 2005 06:34:24 AM UTC, comment #16:

It's working now, thanks.

Mikael Magnusson <mikma>
Thu 11 Aug 2005 06:22:07 AM UTC, comment #15:

No, I meant I changed the server with those options, not the client. It should work without configuring the client.

Sylvain Beucler <Beuc>In charge of this item.
Thu 11 Aug 2005 12:53:34 AM UTC, comment #14:

Putting only

PasswordAuthentication no

into $HOME/.ssh/config did the trick, thanks!

spiralvoice <spiralvoice>
Wed 10 Aug 2005 11:36:20 PM UTC, comment #13:

I installed MSys and made some tests; apparently UsePAM=yes + EnablePasswordAuthentication=No does the trick. Ok for you?

Sylvain Beucler <Beuc>In charge of this item.
Wed 10 Aug 2005 10:59:31 PM UTC, comment #12:

I'm experiencing the same problem. I can't update cvs checkouts that have worked before.

$ ssh -v -unavailable-
OpenSSH_3.8.1p1 Debian-8.sarge.4, OpenSSL 0.9.7e 25 Oct 2004
debug1: Reading configuration data /home/XXX/.ssh/config
debug1: Applying options for savannah.gnu.org
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to savannah.gnu.org [199.232.41.3] port 22.
debug1: Connection established.
debug1: identity file /usb/id_rsa type -1
debug1: identity file /usb/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/XXX/.ssh/known_hosts:28
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Offering public key: XXX
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: XXX
debug1: Trying private key: XXX
debug1: Next authentication method: password
anoncvs@savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
debug1: No more authentication methods to try.
Permission denied (publickey,password).

$ cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
-> parse_cvsroot ( :ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi )
-> main loop with CVSROOT=:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi
-> safe_location( where=(null) )
-> Starting server: ssh -l anoncvs savannah.nongnu.org cvs server
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied (publickey,password).
cvs [checkout aborted]: end of file from server (consult above messages if any)

Mikael Magnusson <mikma>
Wed 10 Aug 2005 10:58:38 PM UTC, comment #11:

$ cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/mldonkey co -P mldonkey
cvs checkout: notice: main loop with CVSROOT=:ext:anoncvs@savannah.nongnu.org:/cvsroot/mldonkey
-> Starting server: ssh savannah.nongnu.org -l anoncvs cvs server
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied (publickey,password).
cvs [checkout aborted]: end of file from server (consult above messages if any)

spiralvoice <spiralvoice>
Wed 10 Aug 2005 10:57:10 PM UTC, comment #10:

$ ssh -v -unavailable-
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 500 geteuid 500 anon 1
debug1: Connecting to savannah.gnu.org [199.232.41.3] port 22.
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/user/.ssh/identity type -1
debug1: identity file /home/user/.ssh/id_rsa type -1
debug1: identity file /home/user/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.9p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 110/256
debug1: bits set: 1062/2048
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
The authenticity of host 'savannah.gnu.org (199.232.41.3)' can't be established.
RSA key fingerprint is 80:5a:b0:0c:ec:93:66:29:49:7e:04:2b:fd:ba:2c:d5.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'savannah.gnu.org,199.232.41.3' (RSA) to the list of known hosts.
debug1: bits set: 1021/2048
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password
debug1: next auth method to try is publickey
debug1: try privkey: /home/user/.ssh/identity
debug1: try privkey: /home/user/.ssh/id_rsa
debug1: try privkey: /home/user/.ssh/id_dsa
debug1: next auth method to try is password
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password
debug1: no more auth methods to try
Permission denied (publickey,password).
debug1: Calling cleanup 0x41bcc4(0x0)

spiralvoice <spiralvoice>
Wed 10 Aug 2005 10:54:38 PM UTC, comment #9:

No, its getting worse now.

anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied (publickey,password).
cvs [checkout aborted]: end of file from server (consult above messages if any)

spiralvoice <spiralvoice>
Wed 10 Aug 2005 09:51:27 PM UTC, comment #8:

Hello,

I turned off 'ChallengeResponseAuthentication' in the configuration. Does this help?

Sylvain Beucler <Beuc>In charge of this item.
Wed 10 Aug 2005 06:53:48 PM UTC, comment #7:

Having the same problem here, also with MSYS/MinGW on Windows.
The same old SSH version is working here, but pressing
Enter three times when asked for the password worked here.

spiralvoice <spiralvoice>
Tue 09 Aug 2005 08:11:55 PM UTC, comment #6:

Thank you. I believe I should upgrade ssh. But let me
answer your other question anyway, just in case that's
helpful:

$ cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
cvs checkout: notice: main loop with CVSROOT=:ext:anoncvs@savannah.nongnu.org:/c
vsroot/lmi
-> Starting server: ssh savannah.nongnu.org -l anoncvs cvs server
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
S-> do_module (lmi, Updating, , )
S-> do_module (lmi, Updating, , )
-> unlink(CVS/Entries.Static)
cvs server: Updating lmi
S-> unlink_file(./CVS/Entries.Static)
S-> rename(CVS/Entries.Backup,CVS/Entries)
S-> unlink_file(CVS/Entries.Log)
S-> unlink_file(skeleton/CVS/Entries.Static)
-> unlink(CVS/Entries.Static)
cvs server: Updating lmi/skeleton
S-> rename(CVS/Entries.Backup,CVS/Entries)
S-> unlink_file(CVS/Entries.Log)
S-> unlink_file(skeleton/CVS/Entries.Static)
-> unlink(CVS/Entries.Static)
cvs server: Updating lmi/skeleton/skeleton
S-> rename(CVS/Entries.Backup,CVS/Entries)
S-> unlink_file(CVS/Entries.Log)

$ ssh -v -unavailable-
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Reading configuration data /home/chicares/.ssh/config
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 500 geteuid 500 anon 1
debug1: Connecting to savannah.gnu.org [199.232.41.3] port 22.
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: temporarily_use_uid: 500/544 (e=500)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/chicares/.ssh/id_rsa type -1
debug1: identity file /home/chicares/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.8.1p1 Deb
ian-8.sarge.4
debug1: match: OpenSSH_3.8.1p1 Debian-8.sarge.4 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.9p2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 123/256
debug1: bits set: 1012/2048
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'savannah.gnu.org' is known and matches the RSA host key.
debug1: Found key in /home/chicares/.ssh/known_hosts2:2
debug1: bits set: 979/2048
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: next auth method to try is publickey
debug1: try privkey: /home/chicares/.ssh/id_rsa
debug1: try pubkey: /home/chicares/.ssh/id_dsa
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: next auth method to try is password
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
Permission denied, please try again.
anoncvs@savannah.gnu.org's password:
debug1: authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: next auth method to try is keyboard-interactive
debug1: ssh-userauth2 successful: method keyboard-interactive
debug1: channel 0: new [client-session]
debug1: channel_new: 0
debug1: send channel open 0
debug1: Entering interactive session.
debug1: client_init id 0 arg 0
debug1: channel request 0: shell
debug1: channel 0: open confirm rwindow 0 rmax 32768
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: channel 0: rcvd eof
debug1: channel 0: output open -> drain
debug1: channel 0: rcvd close
debug1: channel 0: input open -> closed
debug1: channel 0: close_read
debug1: channel 0: obuf empty
debug1: channel 0: output drain -> closed
debug1: channel 0: close_write
debug1: channel 0: send close
debug1: channel 0: is dead
debug1: channel_free: channel 0: status: The following connections are open:
#0 client-session (t4 r0 i8/0 o128/0 fd -1/-1)

debug1: channel_free: channel 0: dettaching channel user
Connection to savannah.gnu.org closed.
debug1: Transferred: stdin 0, stdout 0, stderr 40 bytes in 0.5 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 88.3
debug1: Exit status 0

Greg Chicares <chicares>
Tue 09 Aug 2005 08:02:29 PM UTC, comment #5:

Hello.

Your version of SSH is about 3 years old, so upgrading it is likely to fix the issue.

If that still doesn't work, can you then provide me the output of:
ssh -v -unavailable-
cvs -t -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
?

Sylvain Beucler <Beuc>In charge of this item.
Tue 09 Aug 2005 07:36:33 PM UTC, comment #4:

ssh version:

$ ssh -V
OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL 0x0090602f

platform: ms windows xp; the shell, cvs, and ssh are all
part of MSYS:
http://mingw.org/msys.shtml

ssh known hosts (I have only 'known_hosts2' with '2' on
the end:)

$ cat .ssh/known_hosts2
subversions.gnu.org,199.232.41.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFQovi+67xa
+wymRz9u3plx0ntQnELBoNU4SCl3RkwSFZkrZsRTC0fTpOKatQNs1r/BLFoVt21oVFwIXVevGQwB+Lf0
Z+5w9qwVAQNu/YUAFHBPTqBze4wYK/gSWqQOLoj7rOhZk0xtAS6USqcfKdzMdRWgeuZ550P6gSzEHfv0
=
savannah.gnu.org ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFQovi+67xa+wymRz9u3plx0ntQ
nELBoNU4SCl3RkwSFZkrZsRTC0fTpOKatQNs1r/BLFoVt21oVFwIXVevGQwB+Lf0Z+5w9qwVAQNu/YUA
FHBPTqBze4wYK/gSWqQOLoj7rOhZk0xtAS6USqcfKdzMdRWgeuZ550P6gSzEHfv0=
savannah.nongnu.org,199.232.41.4 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFQovi+67xa
+wymRz9u3plx0ntQnELBoNU4SCl3RkwSFZkrZsRTC0fTpOKatQNs1r/BLFoVt21oVFwIXVevGQwB+Lf0
Z+5w9qwVAQNu/YUAFHBPTqBze4wYK/gSWqQOLoj7rOhZk0xtAS6USqcfKdzMdRWgeuZ550P6gSzEHfv0
=

> I would also like you to try typing different passwords
> several times.


I tried 'foo': it fails twice, then works the third time.
I repeated that process for three cycles, and it always
works the third time only.

I get exactly the same behavior with 'anoncvs', and also
with 'password'.

I get exactly the same behavior if I type 'a', then 'b',
then 'c': the third time, it works. Even if I type nothing
and only hit the Enter key, it works the third time.

Greg Chicares <chicares>
Tue 09 Aug 2005 07:13:38 PM UTC, comment #3:

> Is there anything else you would like me to test?


Yes, I would like to get your version of SSH and your platform. I suspect some compatibility issue, because I still can't reproduce the issue. We upgraded our version of SSH, so that might be the problem.

I would also like you to try typing different passwords several times. There is no password, the password is empty, it is not 'password' more than anything else. Maybe when you type a random combination it gives you the access in the end.

Last, could you also give me your .ssh/known_hosts entry about savannah.nongnu.org. We never know...

Sylvain Beucler <Beuc>In charge of this item.
Tue 09 Aug 2005 06:54:18 PM UTC, comment #2:

> Do you still experience the issue?


Yes, I reproduced it just now. <wboutin> told me she
discovered the same issue this morning; she said that
'anoncvs' was accepted as a password, and then everything
worked normally.

I've been running exactly the same command many times
a day for months, and haven't changed my cvs software.

> We didn't change anything regarding anoncvs, and I
> cannot reproduce the error.


Here are the exact steps I took to reproduce it here.
I started a new bash instance and copied and pasted the
commands shown here
https://savannah.nongnu.org/cvs/?group=lmi
only changing 'co <modulename>' to 'update':

$ pwd
/c/tmp/eraseme

$ export CVS_RSH="ssh"

$ cvs -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi update
anoncvs@savannah.nongnu.org's password:
[I typed 'savannah': no good]
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
[I typed 'anoncvs': no good]
Permission denied, please try again.
anoncvs@savannah.nongnu.org's password:
[I typed 'password': that worked]
cvs update: in directory .:
cvs [update aborted]: there is no version here; run 'cvs checkout' first

I tried 'checkout', but that asks for a password too:

$ cvs -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi co lmi
anoncvs@savannah.nongnu.org's password:

Is there anything else you would like me to test?

Greg Chicares <chicares>
Tue 09 Aug 2005 05:34:15 PM UTC, comment #1:

Do you still experience the issue? We didn't change anything regarding anoncvs, and I cannot reproduce the error.

Sylvain Beucler <Beuc>In charge of this item.
Tue 09 Aug 2005 04:55:13 PM UTC, original submission:

This has always worked for me, without any password:

$ export CVS_RSH="ssh"
$ cvs -z3 -d:ext:anoncvs@savannah.nongnu.org:/cvsroot/lmi update

but today I started getting this response:

anoncvs@savannah.nongnu.org's password:

Is this a deliberate change? It seems to work if I type
'password'.

Greg Chicares <chicares>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Thu 11 Aug 2005 05:36:23 PM UTCBeucStatusNone=>Done
  Open/ClosedOpen=>Closed
Tue 09 Aug 2005 05:34:15 PM UTCBeucAssigned toNone=>Beuc
Tue 09 Aug 2005 04:55:13 PM UTCchicaresCarbon-Copy-=>Added wboutin

Back to the top


Powered by Savane 3.1-cleanup1