Re: [Savannah-help-public] Cannot get read-write priviliges to my project files while using CVS

[Sylvain Beucler]

Hi,

Your accounts appear to function properly.

Please carefully read
https://savannah.nongnu.org/cvs/?group=tlvcomm


Also, when sending SSH and CVS output, please make sure lines are not
broken, and that commands are separate from each others, because in
this case it's not much readable. You could paste them in a .txt and
put it as an attachment, for example.

-- 
Sylvain

On Fri, Jan 11, 2008 at 05:00:55PM -0800, Sanjay Jaiman wrote:
> Hi Sylvain,
> 
> I think I have fixed that.  I have updated the bug
> also... I have created new rsa & dsa keys & also put
> them in the system after having logged in as admin.
> 
> Here is what I am seeing when I try checking out /
> trying to ssh - 
> 
> bash-3.00$ cvs
> -d:pserver:address@hidden:/sources/tlvcomm
> login
> Logging in to
> :pserver:address@hidden:2401/sources/tlvcomm
> CVS password: 
> cvs login: authorization failed: server cvs.sv.gnu.org
> rejected access to /sources/tlvcomm for user sjaiman
> bash-3.00$ ssh -v
> address@hidden:/sources/tlvcomm     
> OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
> debug1: Reading configuration data
> /home/sjaiman/.ssh/config
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> ssh: cvs.sv.gnu.org:/sources/tlvcomm: Name or service
> not known
> bash-3.00$ ssh -v
> address@hidden:/sources/tlvcomm
> OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
> debug1: Reading configuration data
> /home/sjaiman/.ssh/config
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> ssh: cvs.savannah.gnu.org:/sources/tlvcomm: Name or
> service not known
> bash-3.00$ ssh -v
> address@hidden:/sources/tlvcomm
> OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
> debug1: Reading configuration data
> /home/sjaiman/.ssh/config
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> ssh: savannah.gnu.org:/sources/tlvcomm: Name or
> service not known
> bash-3.00$ ssh -v address@hidden        
>         
> OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
> debug1: Reading configuration data
> /home/sjaiman/.ssh/config
> debug1: Applying options for cvs.*gnu.org
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug1: Connecting to cvs.savannah.gnu.org
> [199.232.41.69] port 22.
> debug1: Connection established.
> debug1: identity file /home/sjaiman/.ssh/id_dsa type 2
> debug1: Remote protocol version 2.0, remote software
> version OpenSSH_4.3p2 Debian-9
> debug1: match: OpenSSH_4.3p2 Debian-9 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-OpenSSH_3.9p1
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug1: kex: server->client aes128-cbc hmac-md5 none
> debug1: kex: client->server aes128-cbc hmac-md5 none
> debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192)
> sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> debug1: Host 'cvs.savannah.gnu.org' is known and
> matches the RSA host key.
> debug1: Found key in /home/sjaiman/.ssh/known_hosts:2
> debug1: ssh_rsa_verify: signature correct
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: expecting SSH2_MSG_NEWKEYS
> debug1: SSH2_MSG_NEWKEYS received
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug1: Authentications that can continue: publickey
> debug1: Next authentication method: publickey
> debug1: Offering public key: /home/sjaiman/.ssh/id_dsa
> debug1: Server accepts key: pkalg ssh-dss blen 433
> debug1: PEM_read_PrivateKey failed
> debug1: read PEM private key done: type <unknown>
> Enter passphrase for key '/home/sjaiman/.ssh/id_dsa': 
> debug1: read PEM private key done: type DSA
> debug1: Authentication succeeded (publickey).
> debug1: channel 0: new [client-session]
> debug1: Entering interactive session.
> Last login: Sat Jan 12 00:21:09 2008 from 12.6.244.2
> You tried to execute: 
> Sorry, you are not allowed to execute that command.
> debug1: client_input_channel_req: channel 0 rtype
> exit-status reply 0
> debug1: channel 0: free: client-session, nchannels 1
> Connection to cvs.savannah.gnu.org closed.
> debug1: Transferred: stdin 0, stdout 0, stderr 44
> bytes in 0.2 seconds
> debug1: Bytes per second: stdin 0.0, stdout 0.0,
> stderr 248.5
> debug1: Exit status 1
> bash-3.00$ 
> 
> --- Sylvain Beucler <address@hidden> wrote:
> 
> > Hi,
> > 
> > Can you try fixing your key's permissions first?
> > There are HUGE warnings about it in the SSH output.
> > 
> > -- 
> > Sylvain
> > 
> > On Fri, Jan 11, 2008 at 12:48:17PM -0800, Sanjay
> > Jaiman wrote:
> > > Hi,
> > > 
> > > I am trying to update the sources for "tlvcomm"
> > > project and am getting "permission denied" while
> > > checking out files in read-write mode. My
> > suspicion is
> > > that I am not supplying the correct passphrase
> > while
> > > trying to ssh. Has anyone else experienced this &
> > if
> > > yes, how did you get around this.
> > > 
> > > Here is what I have tried so far - 
> > > 
> > > 
> > > bash-3.00$ cvs -z3
> > >
> >
> -d:ext:address@hidden:/sources/tlvcomm
> > > co tlvcomm 
> > > Permission denied (publickey). 
> > > cvs [checkout aborted]: end of file from server
> > > (consult above messages if any) 
> > > 
> > > 
> > > bash-3.00$ ssh -v address@hidden 
> > > OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003 
> > > debug1: Reading configuration data
> > /etc/ssh/ssh_config
> > > 
> > > debug1: Applying options for * 
> > > debug1: Connecting to cvs.savannah.gnu.org
> > > [199.232.41.69] port 22. 
> > > debug1: Connection established. 
> > > debug1: identity file /home/sjaiman/.ssh/identity
> > type
> > > -1 
> > > debug1: identity file /home/sjaiman/.ssh/id_rsa
> > type
> > > -1 
> > > debug1: identity file /home/sjaiman/.ssh/id_dsa
> > type
> > > -1 
> > > debug1: Remote protocol version 2.0, remote
> > software
> > > version OpenSSH_4.3p2 Debian-9 
> > > debug1: match: OpenSSH_4.3p2 Debian-9 pat OpenSSH*
> > 
> > > debug1: Enabling compatibility mode for protocol
> > 2.0 
> > > debug1: Local version string SSH-2.0-OpenSSH_3.9p1
> > 
> > > debug1: SSH2_MSG_KEXINIT sent 
> > > debug1: SSH2_MSG_KEXINIT received 
> > > debug1: kex: server->client aes128-cbc hmac-md5
> > none 
> > > debug1: kex: client->server aes128-cbc hmac-md5
> > none 
> > > debug1:
> > SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192)
> > > sent 
> > > debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP 
> > > debug1: SSH2_MSG_KEX_DH_GEX_INIT sent 
> > > debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY 
> > > debug1: Host 'cvs.savannah.gnu.org' is known and
> > > matches the RSA host key. 
> > > debug1: Found key in
> > /home/sjaiman/.ssh/known_hosts:2 
> > > debug1: ssh_rsa_verify: signature correct 
> > > debug1: SSH2_MSG_NEWKEYS sent 
> > > debug1: expecting SSH2_MSG_NEWKEYS 
> > > debug1: SSH2_MSG_NEWKEYS received 
> > > debug1: SSH2_MSG_SERVICE_REQUEST sent 
> > > debug1: SSH2_MSG_SERVICE_ACCEPT received 
> > > debug1: Authentications that can continue:
> > publickey 
> > > debug1: Next authentication method: publickey 
> > > debug1: Trying private key:
> > > /home/sjaiman/.ssh/identity 
> > > debug1: Trying private key:
> > /home/sjaiman/.ssh/id_rsa 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > @ WARNING: UNPROTECTED PRIVATE KEY FILE! @ 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > Permissions 0644 for '/home/sjaiman/.ssh/id_rsa'
> > are
> > > too open. 
> > > It is recommended that your private key files are
> > NOT
> > > accessible by others. 
> > > This private key will be ignored. 
> > > bad permissions: ignore key:
> > /home/sjaiman/.ssh/id_rsa
> > > 
> > > Enter passphrase for key
> > '/home/sjaiman/.ssh/id_rsa': 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > @ WARNING: UNPROTECTED PRIVATE KEY FILE! @ 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > Permissions 0644 for '/home/sjaiman/.ssh/id_rsa'
> > are
> > > too open. 
> > > It is recommended that your private key files are
> > NOT
> > > accessible by others. 
> > > This private key will be ignored. 
> > > bad permissions: ignore key:
> > /home/sjaiman/.ssh/id_rsa
> > > 
> > > Enter passphrase for key
> > '/home/sjaiman/.ssh/id_rsa': 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > @ WARNING: UNPROTECTED PRIVATE KEY FILE! @ 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > Permissions 0644 for '/home/sjaiman/.ssh/id_rsa'
> > are
> > > too open. 
> > > It is recommended that your private key files are
> > NOT
> > > accessible by others. 
> > > This private key will be ignored. 
> > > bad permissions: ignore key:
> > /home/sjaiman/.ssh/id_rsa
> > > 
> > > Enter passphrase for key
> > '/home/sjaiman/.ssh/id_rsa': 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > @ WARNING: UNPROTECTED PRIVATE KEY FILE! @ 
> > >
> >
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > 
> > > Permissions 0644 for '/home/sjaiman/.ssh/id_rsa'
> > are
> > > too open. 
> > > It is recommended that your private key files are
> > NOT
> > > accessible by others. 
> > > This private key will be ignored. 
> > > bad permissions: ignore key:
> > /home/sjaiman/.ssh/id_rsa
> > > 
> > > debug1: Trying private key:
> > /home/sjaiman/.ssh/id_dsa 
> > > debug1: No more authentication methods to try. 
> > > Permission denied (publickey). 
> > > bash-3.00$ 
> > > 
> > > 
> > > 
> > > 
> > >      
> >
> ____________________________________________________________________________________
> > > Be a better friend, newshound, and 
> > > know-it-all with Yahoo! Mobile.  Try it now. 
> >
> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > 
> > > 
> > > 
> > > 
> > 
> 
> 
> 
>       
> ____________________________________________________________________________________
> Be a better friend, newshound, and 
> know-it-all with Yahoo! Mobile.  Try it now.  
> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 
>