Can't access to "people" with SSH (was: [NOTICE] Windows build machine setted up)

[Michal Hriň <hr...@apache.org>]

you wrote you had uploaded the SSH keys to id.apache.org, that is a
good
first step.Next a couple of questions:
- which terminal program do you use ?
I use putty, and had to generate the keys with puttygen, you also have
to
remember to
configure the terminal program to use SSH (not telnet) and give a path
to
your part of the key.

- What exactly happens ? is your key rejected or do you get some kind
of
key error ?

<hrin>

I am using graphical terminal emulator xfce-terminal, bash and openssh
6.9p1 ...

so I need to generate keys : ssh-keygen -t rsa
Done.

Now I need to start agent and give to it keys:
ssh-agent
ssh-add

I can check if the agent has keys with:
ssh-add -L
ssh-add -l

Now I am going to id webadmin and copy paste here public ssh-key.

I am awiting that I can connect:
ssh myid@people... or
ssh -2 myid@people... to force v2 protocol.

The output is:
--
Note: logging in to this server with a password has been disabled. 

Please see : 
https://blogs.apache.org/infra/entry/committer_shell_access_to_people

Remember to load your ssh key:-

See: http://linux.die.net/man/1/ssh-add  ;
See: http://linux.die.net/man/1/ssh-agent

Permission denied (publickey).
--

I remembered that, I had setted up keys connection some years ago,
nowadays I do not have old keys. In that time I had to copy my public
key, to .ssh/authorized_keys file on people machine. Now I am not able
to do this. Maybe this is the problem.

Regards,
Michal Hriň   

</hrin>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org

Re: Can't access to "people" with SSH (was: [NOTICE] Windows build machine setted up)

[jan i <ja...@apache.org>]

On Sunday, August 9, 2015, Michal Hriň <hr...@apache.org> wrote:

> you wrote you had uploaded the SSH keys to id.apache.org, that is a
> good
> first step.Next a couple of questions:
> - which terminal program do you use ?
> I use putty, and had to generate the keys with puttygen, you also have
> to
> remember to
> configure the terminal program to use SSH (not telnet) and give a path
> to
> your part of the key.
>
> - What exactly happens ? is your key rejected or do you get some kind
> of
> key error ?
>
> <hrin>
>
> I am using graphical terminal emulator xfce-terminal, bash and openssh
> 6.9p1 ...
>
> so I need to generate keys : ssh-keygen -t rsa
> Done.
>
> Now I need to start agent and give to it keys:
> ssh-agent
> ssh-add
>
> I can check if the agent has keys with:
> ssh-add -L
> ssh-add -l
>
> Now I am going to id webadmin and copy paste here public ssh-key.
>
> I am awiting that I can connect:
> ssh myid@people... or
> ssh -2 myid@people... to force v2 protocol.
>
> The output is:
> --
> Note: logging in to this server with a password has been disabled.
>
> Please see :
> https://blogs.apache.org/infra/entry/committer_shell_access_to_people
>
> Remember to load your ssh key:-
>
> See: http://linux.die.net/man/1/ssh-add  ;
> See: http://linux.die.net/man/1/ssh-agent
>
> Permission denied (publickey).
> --
>
> I remembered that, I had setted up keys connection some years ago,
> nowadays I do not have old keys. In that time I had to copy my public
> key, to .ssh/authorized_keys file on people machine. Now I am not able
> to do this. Maybe this is the problem.

no now ldap is used (id.apache.org), but I wonder if the problem could be
that you have old keys on people.

This would normally give you a key invalid error. Since you get the note it
seems key is rejected and it therefore falls back to the password, which is
blocked.

Fastest solution for you is to jump on hip chat with infra, they have the
karma to e.g. remove your old keys.

rgds
jan i

>
> Regards,
> Michal Hriň
>
> </hrin>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> <javascript:;>
> For additional commands, e-mail: dev-help@openoffice.apache.org
> <javascript:;>
>
>

-- 
Sent from My iPad, sorry for any misspellings.