Re: Permission denied

[Isaac Keslassy]

Many thanks for your extremely kind answer, I really appreciate it!

I pasted the right key format in the webpage and waited for several 
hours, but am still unable to connect. Now ssh has started asking for 
sudo rights, I'm not sure whether it's a good or bad thing...

Sorry again for the very basic questions, and many thanks again! Full 
details below.

-- Isaac


isaac@isaac-VirtualBox:~/gnubg/cvs$ ssh pif@cvs.savannah.gnu.org
Linux vcs1 4.9.0-14-amd64 #1 SMP Debian 4.9.240-2 (2020-10-30) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Nov 12 00:25:01 2020 from 109.67.23.244
You tried to execute:
Sorry, you are not allowed to execute that command.
Connection to cvs.savannah.gnu.org closed.

isaac@isaac-VirtualBox:~/gnubg/cvs$ sudo ssh pif@cvs.savannah.gnu.org
[sudo] password for isaac:
pif@cvs.savannah.gnu.org's password:
Permission denied, please try again.

isaac@isaac-VirtualBox:~/gnubg/cvs$ sudo ssh -v pif@cvs.savannah.gnu.org
OpenSSH_8.2p1 Ubuntu-4ubuntu0.1, OpenSSL 1.1.1f  31 Mar 2020
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include 
/etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug1: Connecting to cvs.savannah.gnu.org [209.51.188.81] port 22.
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.1
debug1: Remote protocol version 2.0, remote software version 
OpenSSH_7.4p1 Debian-10+deb9u7
debug1: match: OpenSSH_7.4p1 Debian-10+deb9u7 pat 
OpenSSH_7.0*,OpenSSH_7.1*,OpenSSH_7.2*,OpenSSH_7.3*,OpenSSH_7.4*,OpenSSH_7.5*,OpenSSH_7.6*,OpenSSH_7.7* 
compat 0x04000002
debug1: Authenticating to cvs.savannah.gnu.org:22 as 'pif'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: 
<implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: 
<implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 
SHA256:qRLLJ4w/GAeiDyYnbx4yWJbZXwGiYYxgNty7lAfUyuM
debug1: Host 'cvs.savannah.gnu.org' is known and matches the ECDSA host key.
debug1: Found key in /root/.ssh/known_hosts:1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: Will attempt key: /root/.ssh/id_rsa
debug1: Will attempt key: /root/.ssh/id_dsa
debug1: Will attempt key: /root/.ssh/id_ecdsa
debug1: Will attempt key: /root/.ssh/id_ecdsa_sk
debug1: Will attempt key: /root/.ssh/id_ed25519
debug1: Will attempt key: /root/.ssh/id_ed25519_sk
debug1: Will attempt key: /root/.ssh/id_xmss
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: 
server-sig-algs=<ssh-ed25519,ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/id_rsa
debug1: Trying private key: /root/.ssh/id_dsa
debug1: Trying private key: /root/.ssh/id_ecdsa
debug1: Trying private key: /root/.ssh/id_ecdsa_sk
debug1: Trying private key: /root/.ssh/id_ed25519
debug1: Trying private key: /root/.ssh/id_ed25519_sk
debug1: Trying private key: /root/.ssh/id_xmss
debug1: Next authentication method: password
pif@cvs.savannah.gnu.org's password:
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.




On 12-Nov-20 1:52 AM, Bob Proulx wrote:
> Isaac Keslassy wrote:
> > I do not manage to ssh to cvs.savannah.gnu.org (I am a new member of gnubg).
> > Please find details below. I probably missed an obvious step. Any ideas?
>
> Thank you for the debug trace from ssh.  That's great! :-)
>
> It looks the key format you stored to your page is faulty.  Log into
> the web UI and go to this page.
>
>      
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsavannah.gnu.org%2Fmy%2Fadmin%2Feditsshkeys.php&amp;data=04%7C01%7Cisaac%40ee.technion.ac.il%7Cddd684de1ea2444661c508d8869ccdbd%7Cf1502c4cee2e411c9715c855f6753b84%7C1%7C0%7C637407355815739327%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&amp;sdata=Cjurzh9qHalDou6RWaLDphXhWx4PVtS8hzVQQhORYSQ%3D&amp;reserved=0
>
> I see that you have three fingerprints stored.  But instead of what is
> there they need to be in ssh key format.  It looks like you stored the
> "ssh-add -l" output there.  Instead of doing that copy the
> ~/.ssh/id_rsa.pub file contents there.
>
> I suggest deleting all three of what you have stored.  Then copying
> one key that you are using.
>
> Here is an example for me here.  This is my ~/.ssh/id_rsa.pub file
> contents.
>
>      ssh-rsa 
> AAAAB3NzaC1yc2EAAAADAQABAAABAQDaJqp76XM9S/dXQtHlRfIN6YiUJIIuJlEdnAxpdM+CApzultPN+l15/1VaAWdaz0GfdP3iKNM+C2cTXGpYY46IjZIuLo0+9LvwyZtFg8Z5GrZvCkYU0wDOO36NZhbe23XES5R6pXqXVD807d7Wr0F1bKemR6drbWJ79cC8dQdGFsuRRgN3vTWNillzl2/SkAv+/1UblIWcMgMLpco7wSdR3fkemNACn4e4S9q95Ddb3O41f51BLGptbL4W86kVPKLxEFLv0B1INQ3Lzqu5N9ATlSgv6KGL5X669BcSS5THL1W7K4gwK6vNejF/vVJ8iGI/jsBw12NydDBjuhK9zjAz
>  rwp@desktop
>
> Or the newer ed25519 keys are okay too.  Definitely more compact.
>
>      ssh-ed25519 
> AAAAC3NzaC1lZDI1NE5ATAAAIFrb8xu/FvLHbd7jvPcygm1CcamoaXtBkrfRrxwlHKa8 rwp@desktop
>
> The problem looks to be simply that the wrong format of the key is
> stored in the form field.  Change things to OpenSSH format and I am
> sure it will be working then.  Here is our reference page on the
> details of setting up ssh access.
>
>      
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsavannah.gnu.org%2Fmaintenance%2FSshAccess%2F&amp;data=04%7C01%7Cisaac%40ee.technion.ac.il%7Cddd684de1ea2444661c508d8869ccdbd%7Cf1502c4cee2e411c9715c855f6753b84%7C1%7C0%7C637407355815739327%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&amp;sdata=CQra9zRiJBkakBaPYk1zO%2BX1aPnT%2BTw%2FViwWFeFzneU%3D&amp;reserved=0
>
> If not...  Let us know and we will dig a little deeper into things! :-)
>
> Sorry this is a rushed response.
>
> Bob
> This email is from an external mail server, be judicious when opening 
> attachments or links