Comment #13 on issue 1750 by chris.ke...@gmail.com: Unable to dd svn+ssh repository when host requires rsa cert auth & disallows password auth
http://code.google.com/p/reviewboard/issues/detail?id=1750

I've updated /var/www/<reviewboard-domain>/data/config to use a specific SSH key and name when accessing the SVN server.

I have sanity checked this as a www-data user and the SSH works from the command line.
However I cannot access an SVN server without a username from reviewboard,

[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,396 - DEBUG - SVNTool: Attempting ssh connection with host: subversion.mblox.com, username: chris.kelly [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,410 - DEBUG - starting thread (client mode): 0x2228992cL [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,427 - INFO - Connected (version 2.0, client OpenSSH_4.3) [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,440 - DEBUG - kex algos:['diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', 'rijndael-...@lysator.liu.se'] server encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', 'rijndael-...@lysator.liu.se'] client mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', 'hmac-ripemd...@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', 'hmac-ripemd...@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'z...@openssh.com'] server compress:['none', 'z...@openssh.com'] client lang:[''] server lang:[''] kex follows?False [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,440 - DEBUG - Ciphers agreed: local=aes128-ctr, remote=aes128-ctr [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,441 - DEBUG - using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,577 - DEBUG - Switch to new keys ... [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,580 - DEBUG - Trying SSH key 419214727ed611cb7babd7283f83a5d6 [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,635 - DEBUG - userauth is OK [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,666 - INFO - Authentication (publickey) successful! [Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,766 - DEBUG - EOF in transport thread
Too many authentication failures for www-data
[Tue Jan 24 22:05:57 2012] [error] 2012-01-24 22:05:57,668 - ERROR - SVN: Failed to get repository information for svn+ssh://subversion.mblox.com/usr/local/svnroot/delivery: Network connection closed unexpectedly

It fails if I use the raw address subversion.mblox.com.

However if I use a username i.e. chris.ke...@subversion.mblox.com I get a connection.

Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,132 - DEBUG - SVNTool: Attempting ssh connection with host: subversion.mblox.com, username: chris.kelly [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,145 - DEBUG - starting thread (client mode): 0x2238576cL [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,163 - INFO - Connected (version 2.0, client OpenSSH_4.3) [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,176 - DEBUG - kex algos:['diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', 'rijndael-...@lysator.liu.se'] server encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', 'rijndael-...@lysator.liu.se'] client mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', 'hmac-ripemd...@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', 'hmac-ripemd...@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'z...@openssh.com'] server compress:['none', 'z...@openssh.com'] client lang:[''] server lang:[''] kex follows?False [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,176 - DEBUG - Ciphers agreed: local=aes128-ctr, remote=aes128-ctr [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,176 - DEBUG - using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,311 - DEBUG - Switch to new keys ... [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,314 - DEBUG - Trying SSH key 419214727ed611cb7babd7283f83a5d6 [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,371 - DEBUG - userauth is OK [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,401 - INFO - Authentication (publickey) successful! [Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,502 - DEBUG - EOF in transport thread [Tue Jan 24 22:10:18 2012] [error] 2012-01-24 22:10:18,871 - DEBUG - SVN: Got repository information for svn+ssh://chris.ke...@subversion.mblox.com/usr/local/svnroot/delivery: [('delivery', <PysvnInfo ''>)] [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,590 - DEBUG - SVNTool: Attempting ssh connection with host: subversion.mblox.com, username: chris.kelly [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,606 - DEBUG - starting thread (client mode): 0x223234acL [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,624 - INFO - Connected (version 2.0, client OpenSSH_4.3) [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,636 - DEBUG - kex algos:['diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', 'rijndael-...@lysator.liu.se'] server encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', 'rijndael-...@lysator.liu.se'] client mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', 'hmac-ripemd...@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', 'hmac-ripemd...@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'z...@openssh.com'] server compress:['none', 'z...@openssh.com'] client lang:[''] server lang:[''] kex follows?False [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,637 - DEBUG - Ciphers agreed: local=aes128-ctr, remote=aes128-ctr [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,637 - DEBUG - using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,775 - DEBUG - Switch to new keys ... [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,778 - DEBUG - Trying SSH key 419214727ed611cb7babd7283f83a5d6 [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,833 - DEBUG - userauth is OK [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,864 - INFO - Authentication (publickey) successful! [Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,964 - DEBUG - EOF in transport thread [Tue Jan 24 22:11:13 2012] [error] 2012-01-24 22:11:13,361 - DEBUG - SVN: Got repository information for svn+ssh://chris.ke...@subversion.mblox.com/usr/local/svnroot/delivery: [('delivery', <PysvnInfo ''>)]

Furthermore it looks like whatever I type in the username field on the webpage is always ignored. The username does not get used when you access the SVN repository




--
You received this message because you are subscribed to the Google Groups 
"reviewboard-issues" group.
To post to this group, send email to reviewboard-issues@googlegroups.com.
To unsubscribe from this group, send email to 
reviewboard-issues+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/reviewboard-issues?hl=en.

Reply via email to