Feature #15721

Access to translate-server.git

Added by hefee 2018-07-08 12:40:32 . Updated 2019-06-27 17:16:37 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
2018-07-08
Due date:
% Done:

0%

Feature Branch:
Type of work:
Sysadmin
Blueprint:

Starter:
Affected tool:
Deliverable for:
309

Description

My SSH key (SHA256:cw/8axzACryGTkCW08T3mI7+39Z/gF733o19p6QoUz8) was added to get access to the translate-server project at Wednesday, but until today, I’m not able to clone it or get any other access.

Here a try of git clone:

GIT_SSH_COMMAND="ssh -v" git clone tails:translate-server
Cloning into 'translate-server'...
OpenSSH_7.7p1 Debian-2, OpenSSL 1.0.2o  27 Mar 2018
debug1: Reading configuration data XXXX/.ssh/config
debug1: XXXX/.ssh/config line 155: Applying options for tails
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to git.tails.boum.org [77.109.139.10] port 22.
debug1: Connection established.
debug1: identity file XXXX/.ssh/id_rsa type 0
debug1: key_load_public: No such file or directory
debug1: identity file XXXX/.ssh/id_rsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.7p1 Debian-2
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
debug1: Authenticating to git.tails.boum.org:22 as 'tails'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
debug1: kex: host key algorithm: ssh-rsa
debug1: kex: server->client cipher: aes128-ctr MAC: hmac-sha2-256 compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: hmac-sha2-256 compression: none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<8192<8192) sent
debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: ssh-rsa SHA256:mgCJgUtJmSu7rvtKoytNWZ/gps2pirNnZL17QSxVqz8
debug1: Host 'git.tails.boum.org' is known and matches the RSA host key.
debug1: Found key in XXXX/.ssh/known_hosts:180
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: RSA SHA256:cw/8axzACryGTkCW08T3mI7+39Z/gF733o19p6QoUz8 XXXX/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Offering public key: RSA 
[...] # other keys
debug1: No more authentication methods to try.
tails@git.tails.boum.org: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

The same result I get if I try to enter the server via ssh:

ssh -v tails@git.tails.boum.org
OpenSSH_7.7p1 Debian-2, OpenSSL 1.0.2o  27 Mar 2018
debug1: Reading configuration data XXXX/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to git.tails.boum.org [77.109.139.10] port 22.
debug1: Connection established.
debug1: identity file XXXX/.ssh/id_rsa type 0
debug1: key_load_public: No such file or directory
debug1: identity file XXXX/.ssh/id_rsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.7p1 Debian-2
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
debug1: Authenticating to git.tails.boum.org:22 as 'tails'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: diffie-hellman-group-exchange-sha256
debug1: kex: host key algorithm: ssh-rsa
debug1: kex: server->client cipher: aes128-ctr MAC: hmac-sha2-256 compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: hmac-sha2-256 compression: none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<8192<8192) sent
debug1: got SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: got SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: ssh-rsa SHA256:mgCJgUtJmSu7rvtKoytNWZ/gps2pirNnZL17QSxVqz8
debug1: Host 'git.tails.boum.org' is known and matches the RSA host key.
debug1: Found key XXXX/.ssh/known_hosts:180
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 4294967296 blocks
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: RSA SHA256:cw/8axzACryGTkCW08T3mI7+39Z/gF733o19p6QoUz8 XXXX
debug1: Authentications that can continue: publickey
debug1: Offering public key: RSA 
[...]
debug1: No more authentication methods to try.
tails@git.tails.boum.org: Permission denied (publickey).

Subtasks

History

#1 Updated by mercedes508 2018-07-09 07:20:24

  • Status changed from New to Confirmed

#2 Updated by hefee 2018-07-26 16:02:01

now I being able to clone the repo YEAH

now the next step - how I do get access to the server?
I find now the servername, but what about the username and password?
I think this is done via keyringer. but how to use it (aka my gpg key is not
added for the keys yet)?
$ keyringer translate-server decrypt passwords.asc
gpg: decryption failed: No secret key

#3 Updated by groente 2018-08-15 11:08:46

  • Tracker changed from Bug to Feature
  • Assignee deleted (groente)
  • QA Check set to Info Needed

Heya, can you please confirm hefee should get ssh access to translate?

#4 Updated by Anonymous 2018-08-15 14:42:19

  • Subject changed from Acess to tranlate-server to Access to translate-server
  • Assignee set to groente
  • QA Check deleted (Info Needed)

Confirmed. All users of the repo must update their git/config file for hefee’s key id.

#5 Updated by Anonymous 2018-08-16 10:38:16

  • Subject changed from Access to translate-server to Access to translate-server.git

#6 Updated by groente 2018-08-22 14:12:15

  • Status changed from Confirmed to Resolved
  • QA Check set to Ready for QA

Hefee is now a user on translate and member of the weblate_admin group.

#7 Updated by intrigeri 2018-12-02 21:45:25

  • QA Check deleted (Ready for QA)

#8 Updated by Anonymous 2019-02-07 15:40:08

#9 Updated by intrigeri 2019-06-27 17:16:37

  • Assignee deleted (groente)