Comment #14 on issue 1750 by [email protected]: Unable to dd svn+ssh
repository when host requires rsa cert auth & disallows password auth
http://code.google.com/p/reviewboard/issues/detail?id=1750
Using ReviewBoard 1.6.3 - Ubuntu
I've updated /var/www/<reviewboard-domain>/data/config to use a specific
SSH key and name when accessing the SVN server.
I have sanity checked this as a www-data user and the SSH works from the
command line.
However I cannot access the SVN server without a username in the SVN url,
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,396 - DEBUG -
SVNTool: Attempting ssh connection with host: subversion.acme.com,
username: chris.kelly
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,410 - DEBUG -
starting thread (client mode): 0x2228992cL
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,427 - INFO -
Connected (version 2.0, client OpenSSH_4.3)
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,440 - DEBUG - kex
algos:['diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1']
server key:['ssh-rsa', 'ssh-dss'] client
encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', '[email protected]']
server
encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', '[email protected]']
client
mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', '[email protected]', 'hmac-sha1-96', 'hmac-md5-96']
server
mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', '[email protected]', 'hmac-sha1-96', 'hmac-md5-96']
client compress:['none', '[email protected]'] server
compress:['none', '[email protected]'] client lang:[''] server lang:[''] kex
follows?False
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,440 - DEBUG -
Ciphers agreed: local=aes128-ctr, remote=aes128-ctr
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,441 - DEBUG - using
kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local
aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1;
compression: local none, remote none
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,577 - DEBUG - Switch
to new keys ...
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,580 - DEBUG - Trying
SSH key 419214727ed611cb7babd7283f83a5d6
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,635 - DEBUG -
userauth is OK
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,666 - INFO -
Authentication (publickey) successful!
[Tue Jan 24 22:05:56 2012] [error] 2012-01-24 22:05:56,766 - DEBUG - EOF in
transport thread
Too many authentication failures for www-data
[Tue Jan 24 22:05:57 2012] [error] 2012-01-24 22:05:57,668 - ERROR - SVN:
Failed to get repository information for
svn+ssh://subversion.acme.com/usr/local/svnroot/delivery: Network
connection closed unexpectedly
It fails if I use the raw address subversion.acme.com.
However if I use a username i.e. [email protected] I get a
connection.
Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,132 - DEBUG -
SVNTool: Attempting ssh connection with host: subversion.acme.com,
username: chris.kelly
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,145 - DEBUG -
starting thread (client mode): 0x2238576cL
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,163 - INFO -
Connected (version 2.0, client OpenSSH_4.3)
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,176 - DEBUG - kex
algos:['diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1']
server key:['ssh-rsa', 'ssh-dss'] client
encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', '[email protected]']
server
encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', '[email protected]']
client
mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', '[email protected]', 'hmac-sha1-96', 'hmac-md5-96']
server
mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', '[email protected]', 'hmac-sha1-96', 'hmac-md5-96']
client compress:['none', '[email protected]'] server
compress:['none', '[email protected]'] client lang:[''] server lang:[''] kex
follows?False
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,176 - DEBUG -
Ciphers agreed: local=aes128-ctr, remote=aes128-ctr
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,176 - DEBUG - using
kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local
aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1;
compression: local none, remote none
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,311 - DEBUG - Switch
to new keys ...
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,314 - DEBUG - Trying
SSH key 419214727ed611cb7babd7283f83a5d6
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,371 - DEBUG -
userauth is OK
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,401 - INFO -
Authentication (publickey) successful!
[Tue Jan 24 22:10:17 2012] [error] 2012-01-24 22:10:17,502 - DEBUG - EOF in
transport thread
[Tue Jan 24 22:10:18 2012] [error] 2012-01-24 22:10:18,871 - DEBUG - SVN:
Got repository information for
svn+ssh://[email protected]/usr/local/svnroot/delivery:
[('delivery', <PysvnInfo ''>)]
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,590 - DEBUG -
SVNTool: Attempting ssh connection with host: subversion.acme.com,
username: chris.kelly
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,606 - DEBUG -
starting thread (client mode): 0x223234acL
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,624 - INFO -
Connected (version 2.0, client OpenSSH_4.3)
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,636 - DEBUG - kex
algos:['diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1']
server key:['ssh-rsa', 'ssh-dss'] client
encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', '[email protected]']
server
encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr', 'arcfour256', 'arcfour128', 'aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'aes192-cbc', 'aes256-cbc', 'arcfour', '[email protected]']
client
mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', '[email protected]', 'hmac-sha1-96', 'hmac-md5-96']
server
mac:['hmac-md5', 'hmac-sha1', 'hmac-ripemd160', '[email protected]', 'hmac-sha1-96', 'hmac-md5-96']
client compress:['none', '[email protected]'] server
compress:['none', '[email protected]'] client lang:[''] server lang:[''] kex
follows?False
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,637 - DEBUG -
Ciphers agreed: local=aes128-ctr, remote=aes128-ctr
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,637 - DEBUG - using
kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local
aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1;
compression: local none, remote none
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,775 - DEBUG - Switch
to new keys ...
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,778 - DEBUG - Trying
SSH key 419214727ed611cb7babd7283f83a5d6
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,833 - DEBUG -
userauth is OK
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,864 - INFO -
Authentication (publickey) successful!
[Tue Jan 24 22:11:11 2012] [error] 2012-01-24 22:11:11,964 - DEBUG - EOF in
transport thread
[Tue Jan 24 22:11:13 2012] [error] 2012-01-24 22:11:13,361 - DEBUG - SVN:
Got repository information for
svn+ssh://[email protected]/usr/local/svnroot/delivery:
[('delivery', <PysvnInfo ''>)]
Furthermore it looks like whatever I type in the username field on the
webpage is always ignored. The username does not get used when you access
the SVN repository
--
You received this message because you are subscribed to the Google Groups
"reviewboard-issues" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/reviewboard-issues?hl=en.
