Re: [Fedora people] - Public key denied

[Jose Manimala]

The output is below,

OpenSSH_5.5p1 Debian-6, OpenSSL 0.9.8o 01 Jun 2010
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to fedorapeople.org [85.236.55.7] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug3: Not a RSA1 key file /home/jose/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/jose/.ssh/id_rsa type 1
debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
debug1: identity file /home/jose/.ssh/id_rsa-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.5p1 Debian-6
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: [e-mail],[e-mail],ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail]
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail]
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[e-mail],hmac-ripemd160,[e-mail],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[e-mail],hmac-ripemd160,[e-mail],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,[e-mail],zlib
debug2: kex_parse_kexinit: none,[e-mail],zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail]
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail]
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[e-mail],hmac-ripemd160,[e-mail],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[e-mail],hmac-ripemd160,[e-mail],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,[e-mail]
debug2: kex_parse_kexinit: none,[e-mail]
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: mac_setup: found hmac-md5
debug1: kex: server->client aes128-ctr hmac-md5 none
debug2: mac_setup: found hmac-md5
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug2: dh_gen_key: priv key bits set: 126/256
debug2: bits set: 504/1024
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug3: check_host_in_hostfile: host fedorapeople.org filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: host fedorapeople.org filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 3
debug3: check_host_in_hostfile: host 85.236.55.7 filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: host 85.236.55.7 filename /root/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 4
debug1: Host 'fedorapeople.org' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:3
debug2: bits set: 485/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /home/jose/.ssh/id_rsa (0x7f87ca789e20)
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/jose/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey).

Thanks,
Jose

Ricky Elrod  wrote ..
> Can you give us the output of: ssh -vvvvv -i /path/to/your/fedora/id_rsa
> [e-mail]
>
> -re
>
> On Fri, Oct 7, 2011 at 12:41 AM,  wrote:
> > Hello,
> >              I tried updating my keys five days ago, and logging into
> > fedora people to update my blog feed as the current one lists the whole blog
> > and has a lot of irrelevant content in it. I get a public key denied message
> > when ever I try to loging to fpeople.o. Can someone help me out with why I
> > cant login. Any help is appreciated.
> >
> > Thank you,
> > Jose
> >
> > infrastructure mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[Fedora people] - Public key denied

[Adam M. Dutko]

I think that system is covered by the new "login method" via bastion.
If so, did you follow the SOP? The link is:

https://fedoraproject.org/wiki/SSH_Access_Infrastructure_SOP

[Fedora people] - Public key denied

[Stephen John Smoogen]

On Fri, Oct 7, 2011 at 06:45, Adam M. Dutko  wrote:
> I think that system is covered by the new "login method" via bastion.
> If so, did you follow the SOP? The link is:
>
> https://fedoraproject.org/wiki/SSH_Access_Infrastructure_SOP

Actually I don't that is the problem in this case, people should be
able to directly log into people without going through the bastion. In
any case a couple of questions

It looks like the issue with the logins is that you need to login via
"josemm" versus jose. SSH gives that message about key exchange no
matter what the real cause of problems.

[Fedora people] - Public key denied

[Jose Manimala]

Sorry that was my mistake, i tried it with the correct user name and i 
still get permission denied.

~Jose
On 10/07/2011 08:44 PM, Stephen John Smoogen wrote:
> On Fri, Oct 7, 2011 at 06:45, Adam M. Dutko  wrote:
> > I think that system is covered by the new "login method" via bastion.
> > If so, did you follow the SOP? The link is:
> >
> > https://fedoraproject.org/wiki/SSH_Access_Infrastructure_SOP
>
> Actually I don't that is the problem in this case, people should be
> able to directly log into people without going through the bastion. In
> any case a couple of questions
>
> It looks like the issue with the logins is that you need to login via
> "josemm" versus jose. SSH gives that message about key exchange no
> matter what the real cause of problems.

[Fedora people] - Public key denied

[Kevin Fenzi]

On Fri, 07 Oct 2011 21:02:17 +0530
Jose Manimala  wrote:
> Sorry that was my mistake, i tried it with the correct user name and
> i still get permission denied.

Due to trying with the wrong login a number of times, your IP was added
to denyhosts. ;)

I've removed it now... can you try again ?

kevin

[Fedora people] - Public key denied

[Jose Manimala]

i get permission denied, my ip is 91.226.88.225 if that helps.
cheers,
Jose
On 10/07/2011 09:06 PM, Kevin Fenzi wrote:
> On Fri, 07 Oct 2011 21:02:17 +0530
> Jose Manimala  wrote:
> > Sorry that was my mistake, i tried it with the correct user name and
> > i still get permission denied.
>
> Due to trying with the wrong login a number of times, your IP was added
> to denyhosts. ;)
>
> I've removed it now... can you try again ?
>
> kevin
>
> infrastructure mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[Fedora people] - Public key denied

[Kevin Fenzi]

On Fri, 07 Oct 2011 21:34:09 +0530
Jose Manimala  wrote:
> i get permission denied, my ip is 91.226.88.225 if that helps.
> cheers,

Now it doesn't seem to like your key...

error: key_read: uudecode AAAA....restofkey....de\n failed

Can you re-upload your public key and ensure it's ok?

kevin

[Fedora people] - Public key denied

[Jose Manimala]

done now :)
thanks,
Jose
On 10/07/2011 09:43 PM, Kevin Fenzi wrote:
> On Fri, 07 Oct 2011 21:34:09 +0530
> Jose Manimala  wrote:
> > i get permission denied, my ip is 91.226.88.225 if that helps.
> > cheers,
>
> Now it doesn't seem to like your key...
>
> error: key_read: uudecode AAAA....restofkey....de\n failed
>
> Can you re-upload your public key and ensure it's ok?
>
> kevin
>
> infrastructure mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[Fedora people] - Public key denied

[Jose Manimala]

That did the trick it works now thank you Kevin :)

cheers,
Jose
On 10/07/2011 09:52 PM, Jose Manimala wrote:
> done now :)
> thanks,
> Jose
> On 10/07/2011 09:43 PM, Kevin Fenzi wrote:
> > On Fri, 07 Oct 2011 21:34:09 +0530
> > Jose Manimala  wrote:
> > > i get permission denied, my ip is 91.226.88.225 if that helps.
> > > cheers,
> >
> > Now it doesn't seem to like your key...
> >
> > error: key_read: uudecode AAAA....restofkey....de\n failed
> >
> > Can you re-upload your public key and ensure it's ok?
> >
> > kevin
> >
> > infrastructure mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>
> infrastructure mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure