Issue 15992 - ssh key
Summary: ssh key
Status: CLOSED FIXED
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: Website general issues (show other issues)
Version: current
Hardware: Other Linux, all
: P3 Trivial (vote)
Target Milestone: ---
Assignee: sparcmoz
QA Contact: issues@www
URL:
Keywords: TSK-DEF
Depends on:
Blocks:
 
Reported: 2003-06-24 11:09 UTC by sparcmoz
Modified: 2008-12-05 17:12 UTC (History)
2 users (show)

See Also:
Issue Type: TASK
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments
public key (597 bytes, text/plain)
2003-06-24 11:10 UTC, sparcmoz
no flags Details
new ssh public key (597 bytes, text/plain)
2005-08-14 07:09 UTC, sparcmoz
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description sparcmoz 2003-06-24 11:09:07 UTC
ssh key attached
Comment 1 sparcmoz 2003-06-24 11:10:59 UTC
Created attachment 7096 [details]
public key
Comment 2 sparcmoz 2003-06-24 11:12:01 UTC
assign to ssh2key
Comment 3 sparcmoz 2003-06-24 11:23:43 UTC
access required for porting cws_srx644_ooo11beta2 to sparc linux. i
have  got the source from anoncvs but would like to contribute the
tarballs.
Comment 4 louis suarez-potts 2003-07-01 18:56:25 UTC
Hi
this sounds good. It sounds, too, as if you could establish a general
sparc/linux port on Porting.  I'm cc'ing Martin Hollmichel, lead of
porting. Before I can accept your key, I need his authorization.
louis 
Comment 5 Martin Hollmichel 2003-07-01 20:10:59 UTC
approve.
Comment 6 lsuarezpotts 2003-07-01 21:45:17 UTC
okay,
support, please add this key to the server.
thanks
louis
Comment 7 Unknown 2003-07-01 22:03:44 UTC
action plan:
1) file internal issue for the ops group to add the key to the server
2) update this issue when the key's been added.
PCN 19948 filed, step 1 complete
timeframe: I will update this issue by 7/2
Comment 8 Unknown 2003-07-02 16:02:44 UTC
The key has been added to the server, step 2 complete.
Please test your access and either closer this issue or route it
accordingly
Comment 9 sparcmoz 2003-07-02 23:07:32 UTC
the ssh times out. i wonder is it getting out my firewall? the public key says i am 
jim@sun. i am sory this is all new to me, but perhaps the answer is obvious below? 
 
jim@sun:~$ ssh -v -2 -x -L 2401:localhost:2401 tunnel@openoffice.org 
OpenSSH_3.6.1p2 Debian 1:3.6.1p2-3, SSH protocols 1.5/2.0, OpenSSL 
0x0090702f 
debug1: Reading configuration data /etc/ssh/ssh_config 
debug1: Rhosts Authentication disabled, originating port will not be trusted. 
debug1: Connecting to openoffice.org [64.125.133.202] port 22. 
debug1: connect to address 64.125.133.202 port 22: Connection timed out 
ssh: connect to host openoffice.org port 22: Connection timed out 
jim@sun:~$ 
sun:/etc/ssh# cat ssh_config 
#       $OpenBSD: ssh_config,v 1.16 2002/07/03 14:21:05 markus Exp $ 
 
# This is the ssh client system-wide configuration file.  See 
# ssh_config(5) for more information.  This file provides defaults for 
# users, and the values can be changed in per-user configuration files 
# or on the command line. 
 
# Configuration data is parsed as follows: 
#  1. command line options 
#  2. user-specific file 
#  3. system-wide file 
# Any configuration value is only changed the first time it is set. 
# Thus, host-specific definitions should be at the beginning of the 
# configuration file, and defaults at the end. 
 
# Site-wide defaults for various options 
 
# Host * 
#   ForwardAgent no 
#   ForwardX11 no 
#   RhostsAuthentication no 
#   RhostsRSAAuthentication no 
#   RSAAuthentication yes 
#   PasswordAuthentication yes 
#   HostbasedAuthentication no 
#   BatchMode no 
#   CheckHostIP yes 
#   StrictHostKeyChecking ask 
#   IdentityFile ~/.ssh/identity 
#   IdentityFile ~/.ssh/id_rsa 
   IdentityFile ~/.ssh/id_dsa 
#   Port 22 
#   Protocol 2,1 
   Cipher 3des 
#   Ciphers 
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc 
#   EscapeChar ~ 
sun:/etc/ssh# 
jim@sun:~/.ssh$ ls -la 
total 28 
drwx------    2 jim      jim          4096 Jun 24 20:01 . 
drwxr-xr-x  207 jim      jim         12288 Jul  3 08:01 .. 
-rw-------    1 jim      jim           736 Jun 24 20:01 id_dsa 
-rw-r--r--    1 jim      jim           597 Jun 24 20:01 id_dsa.pub 
-rw-r--r--    1 jim      jim           227 Jan 13 10:26 known_hosts 
jim@sun:~/.ssh$ 
 
 
Comment 10 sparcmoz 2003-07-02 23:20:21 UTC
in ssh_config this is all one line , it just wraps around in issuezilla 
#   Ciphers aes128-cbc,3des-cbc,blowfish-cbc, ... etc 
 
Comment 11 lsuarezpotts 2003-07-03 08:20:23 UTC
interesting. it may be the firewall.  I have no good suggestions for getting through 
your particular firewall but I should have thought that port 22 would be allowed.
Kenneth? ideas?
louis
Comment 12 Unknown 2003-07-03 16:43:49 UTC
Yes, it reads like a firewall problem. Have you talked to your system
administrator?
Comment 13 sparcmoz 2003-07-07 03:17:45 UTC
the ssh is working for me, many thanks 
Comment 14 sparcmoz 2003-07-07 12:50:17 UTC
Hi, i got the tunnel but not cvs?
jim@sun:~$ ssh -2 -x -L 2401:localhost:2401 tunnel@openoffice.org

Enter passphrase for key '/home/jim/.ssh/id_dsa':
bind: Address already in use
channel_setup_fwd_listener: cannot listen to port: 2401
Could not request local forwarding.
Tunnel established.

==kept that shell and opened new shell ===

jim@sun:~$ export SRC_ROOT=/usr/local/oo_src
jim@sun:~$ cd $SRC_ROOT
jim@sun:/usr/local/oo_src$ export CVSROOT=:pserver:sparcmoz@localhost:/cvs
jim@sun:/usr/local/oo_src$ cvs login
Logging in to :pserver:sparcmoz@localhost:2401/cvs
CVS password:
/cvs: no such repository
jim@sun:/usr/local/oo_src$
Comment 15 Martin Hollmichel 2003-07-07 13:11:28 UTC
it seems to me that you already have a cvs service running on your
machine, so that there is a collision on local port 2401 ?!
Comment 16 sparcmoz 2003-07-07 13:54:38 UTC
thanks, i found cervisia and lxr-cvs, got rid of those and all is
working fine 
Comment 17 sparcmoz 2003-07-08 13:50:42 UTC
i am just letting you know in case someone else has this problem with
debian/unstable it may save your time, i need to apt-get remove cvs,
then i can make the ssh tunnel, then apt-get install cvs to make the
cvs session. if cvs is installed by default it does not allow the ssh
tunnel. debian issue #183659 was there already.

Comment 18 lsuarezpotts 2003-07-09 04:08:20 UTC
sparcmoz, this is useful information. I'll add it to the Ooo documentation.
glad it works
Louis 
Comment 19 sparcmoz 2003-07-09 09:56:48 UTC
The preceding only describes the symptoms of my problem. I have
received advice as follows regarding the correct solution which
relates to debian

>localhost:2401
>debug1: Local forwarding listening on ::1 port 2401.
>bind: Address already in use

This just means that you're already running a local cvs server on port
2401. dpkg-reconfigure cvs will allow you to disable it if you're not
going to use it.

-- 
Steve McIntyre, Cambridge, UK.                               
steve@einval.com
Comment 20 sparcmoz 2003-12-31 10:57:20 UTC
ssh working nicely - closing issue
Comment 21 stx123 2004-03-22 16:08:17 UTC
For technical reasons we have to move the issue to another subcomponent tan 'www'.
Sorry for bothering you with this generated notification message. There is no
need for any action from yor side.
Thanks for your understanding, Stefan
Comment 22 Martin Hollmichel 2004-04-04 18:40:00 UTC
set target to current, so that we can remove 1.1beta version from www component
Comment 23 sparcmoz 2005-08-14 07:09:58 UTC
Created attachment 28758 [details]
new ssh public key
Comment 24 sparcmoz 2005-08-14 07:11:23 UTC
sorry but i had to make a new key for cvs/cws, the old key has ceased to exist. 
Comment 25 sparcmoz 2005-08-14 07:12:07 UTC
re-assign for new key 
Comment 26 Martin Hollmichel 2005-08-14 08:41:42 UTC
approved and reassign to support, the old key sould be removed then.
Comment 27 Unknown 2005-08-15 17:29:55 UTC
Accepting the issue. Have filed an internal ticket to upload the public key of
the   user. Will get back to you as soon as it is done.

Thanks,
Karishma-Helpdesk
Comment 28 Unknown 2005-08-15 17:44:02 UTC
The public key of the user has been uploaded.

Thanks,
Karishma-Helpdesk
Comment 29 sparcmoz 2005-08-29 20:19:04 UTC
The ssh tunnel works fine, thank you.

Does that mean my cws access is already updated too? I need the same new public
key for cws. If you can confirm cws should be working i will file a new issue
about this cws problem. I have copied the password and got the required perl
modules.

 jim@sun:~/ooo680$ cwsquery -m SRC680 latest
cwsquery -- version: 1.6
Warning: web service unavailable. Trying backup server.
ERROR: Connection to EIS database failed.
 at /home/jim/ooo680/solenv/bin/modules/Cws.pm line 1094
cwsquery: ERROR: Can't determine latest milestone of 'SRC680' available for resync.

FAILURE: cwsquery aborted.
Comment 30 Martin Hollmichel 2005-08-30 09:15:57 UTC
no, ssh key is independent for cvs/CWS password, please verify if you're able to
do an cvs login.
Comment 31 sparcmoz 2005-08-31 13:17:58 UTC
I logged into cvs through the shh tunnel using my password the first time, now
there is an entry in .cvspass with a password
and I can use cvs commands

jim@sun:~/ooo680$ set | grep CVSROOT
CVSROOT=:pserver:sparcmoz@localhost:/cvs
jim@sun:~/ooo680$ cvs status zlib
User sparcmoz doesn't have <VersionControl - Read> access to project zlib
? zlib/unxlngs.pro
cvs status: Examining zlib
===================================================================
File: makefile.mk       Status: Up-to-date

   Working revision:    1.5
<snip>

Comment 32 Martin Hollmichel 2005-08-31 15:29:48 UTC
I have verified that sparcmoz still have access to all modules, do the problems
persist if you do a fresh checkout ?
Comment 33 sparcmoz 2005-08-31 23:01:00 UTC
By the way i normally checkout with anoncvs. I mainly need access to use the cws
tools for committing patches.
Connect to tunnel ok
jim@sun:~$ ssh -v -x -2 -L 2401:localhost:2401 tunnel@openoffice.org
OpenSSH_4.1p1 Debian-6, OpenSSL 0.9.7g 11 Apr 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to openoffice.org [64.125.133.202] port 22.
debug1: Connection established.
debug1: identity file /home/jim/.ssh/id_rsa type -1
debug1: identity file /home/jim/.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.6.1p2
debug1: match: OpenSSH_3.6.1p2 pat OpenSSH_3.*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.1p1 Debian-6
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'openoffice.org' is known and matches the RSA host key.
debug1: Found key in /home/jim/.ssh/known_hosts:5
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/jim/.ssh/id_rsa
debug1: Offering public key: /home/jim/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 433
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Enter passphrase for key '/home/jim/.ssh/id_dsa':
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).
debug1: Local connections to LOCALHOST:2401 forwarded to remote address
localhost:2401
debug1: Local forwarding listening on 127.0.0.1 port 2401.
debug1: channel 0: new [port listener]
debug1: Local forwarding listening on ::1 port 2401.
debug1: channel 1: new [port listener]
debug1: channel 2: new [client-session]
debug1: Entering interactive session.
debug1: Sending environment.
debug1: Sending env LANG = en_AU
Tunnel established.  Type ctrl-c to exit.

jim@sun:~/testcvs$ export CVSROOT=:pserver:sparcmoz@localhost:/cvs
jim@sun:~/testcvs$ cvs co -r SRC680_m126 OpenOffice
cvs server: Updating helpcontent
cvs server: Updating helpcontent/prj
cvs server: Updating helpcontent/unx
cvs server: Updating helpcontent/unx/common
cvs server: Updating helpcontent/unx/common/english_us
cvs server: Updating helpcontent/unx/sbasic

jim@sun:~/testcvs$ cd ../ooo680
jim@sun:~/ooo680$ source *et.sh
jim@sun:~/ooo680$ cwsquery -m SRC680 latest
cwsquery -- version: 1.6
Warning: web service unavailable. Trying backup server.
ERROR: Connection to EIS database failed.
 at /home/jim/ooo680/solenv/bin/modules/Cws.pm line 1094
cwsquery: ERROR: Can't determine latest milestone of 'SRC680' available for resync.

FAILURE: cwsquery aborted.
Comment 34 sparcmoz 2005-09-17 14:18:42 UTC
Problem solved, closing issue as it works for me, thanks.

This works ok in ~/.cwsrc
# Your CVS login (for authentication with the CWS database).
CVS_ID=sparcmoz

This fails with the mentioned error messages
CVS_ID=sparcmoz@localhost
Comment 35 sparcmoz 2005-09-18 02:17:29 UTC
I have created using cwscreate and added issues and modules OK but i cannot
commit changes:

jim@sun:~/ooo680$ cwsquery owner
cwsquery -- version: 1.7
cwsquery: Master workspace 'SRC680', child workspace 'unxlngs03':
cwsquery: Owner:
sparcmoz@openoffice.org

jim@sun:~/ooo680$ cvs commit -m"#i51545#: to build bridges on GNU/Linux Sparc
with gcc4" bridges/source/cpp_uno/gcc3_linux_sparc/cpp2uno.cxx
cvs [server aborted]: "commit" requires write access to the repository
jim@sun:~/ooo680$

jim@sun:~/ooo680$ cat ../.cwsrc | grep sparc
CVS_ID=sparcmoz
CVS_SERVER_ROOT=:pserver:sparcmoz@localhost:2401/cvs
Comment 36 sparcmoz 2005-09-18 02:29:58 UTC
correction, the modules are not added, although the cws is created and tasks are
added.  I have already restored my bridges with 
cvs update -C -r SRC680_m129 bridges

jim@sun:~/ooo680$  cwsadd -a -f bridges
cwsadd -- version: 1.7
        Updating 'bridges' ...
cwsadd: Tagging module 'bridges'.
cwsadd: Tag with branch tag 'cws_src680_unxlngs03'.

cwsadd: ERROR: Tagging module 'bridges' failed.
cwsadd: ERROR: Adding and/or registering module 'bridges' failed!

FAILURE: cwsadd aborted.
jim@sun:~/ooo680$
Comment 37 sparcmoz 2005-09-23 11:19:17 UTC
my bad, solved by irc:

sparcmoz	jim@sun:~/ooo680$ cat bridges/CVS/Root
:pserver:anoncvs@anoncvs.services.openoffice.org:/cvs
paveljanik	sparcmoz: anoncvs!!!
caolan	sparcmoz: there's your problem, it needs to be the tunnel Root
Comment 38 sparcmoz 2006-02-15 11:37:47 UTC
close this task for now
Comment 39 jens-heiner.rechtien 2008-12-03 17:22:44 UTC
Migrated to SVN.