Arch Linux

stark.dreamdetective

Member

Registered: 2015-10-30

Posts: 5

aur.archlinux.org git authentification problem

Hi folks!

I'm a maintainer of two aur-packages, both created in pre-aur4 time (cdo, cdi). I successfully changed to aur4/git. But now I cannot commit/clone anymore. So I went back to the wiki, re-create an ed25519-based key-pairs dedicated for aur, adjusted the public-key in the Account-setup and set up the ssh configuration:

Host aur.archlinux.org      
  User aur                  
  IdentitiesOnly yes        
  IdentityFile ~/.ssh/id_aur
                            
Host aur4.archlinux.org     
  User aur                  
  IdentitiesOnly yes        
  IdentityFile ~/.ssh/id_aur  

... but, it still doesn work:

cloning:

ram@luthien:~/src/aur git clone ssh://aur@aur4.archlinux.org/cdo.git 
Cloning into 'cdo'...
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
ram@luthien:~/src/aur git clone ssh://aur@aur.archlinux.org/cdo.git
Cloning into 'cdo'...
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

or pushing from the old git checkout

ram@luthien:~/src/external/cdo git remote show origin
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

ram@luthien:~/src/external/cdo git push
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

I'd really like to update the packages, so any hints are welcome!!

thanks in advance
ralf

mauritiusdadd

Member

From: Benevento, Italy

Registered: 2013-10-27

Posts: 776

Re: aur.archlinux.org git authentification problem

What happens if you clone the repository using the following command?

$ git clone ssh://aur.archlinux.org/cdo.git

---

About me - github

-- When you have eliminated the impossible, whatever remains, however improbable, must be the truth -- Spock | Sherlock Holmes

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,729

Re: aur.archlinux.org git authentification problem

I'll ask the obvious question, is that the correct filename in IdentifyFile?

Edit: oh, and the common mistake, is there newlines in the public key you copied to the AUR web interface?

Last edited by Scimmia (2015-10-30 16:46:40)

stark.dreamdetective

Member

Registered: 2015-10-30

Posts: 5

Re: aur.archlinux.org git authentification problem

What happens if you clone the repository using the following command?

$ git clone ssh://aur.archlinux.org/cdo.git

its always the same error message:

ram@luthien:~/src/tmp git clone ssh://aur.archlinux.org/cdo.git                                    [11:08:49|15-11-09]
Cloning into 'cdo'...
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

stark.dreamdetective

Member

Registered: 2015-10-30

Posts: 5

Re: aur.archlinux.org git authentification problem

I'll ask the obvious question, is that the correct filename in IdentifyFile?

Edit: oh, and the common mistake, is there newlines in the public key you copied to the AUR web interface?

heres my profile

https://code.zmaw.de/attachments/downlo … rofile.png

there is no newline at the end of the string

Mod note: Converted img to url. Please see the etiquette regarding appropriate image sizes. -- WorMzy

Last edited by WorMzy (2015-11-09 13:31:53)

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,394

Re: aur.archlinux.org git authentification problem

Please run "git remote --verbose"  on your local git repo

It will prob list something like this :

origin  ssh://aur@aur4.archlinux.org/foo.git (fetch)
origin  ssh://aur@aur4.archlinux.org/foo.git (push)

If that's what you see, your local git repo still points to aur4 , which doesn't work anymore.
Delete the old local repo and recreate it with git clone .

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,648

Website

Re: aur.archlinux.org git authentification problem

If that's what you see, your local git repo still points to aur4 , which doesn't work anymore.
Delete the old local repo and recreate it with git clone .

Alternatively modify $package/.git/config or use 'git remote set-url' to update the address.

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

stark.dreamdetective

Member

Registered: 2015-10-30

Posts: 5

Re: aur.archlinux.org git authentification problem

Please run "git remote --verbose"  on your local git repo

It will prob list something like this :

origin  ssh://aur@aur4.archlinux.org/foo.git (fetch)
origin  ssh://aur@aur4.archlinux.org/foo.git (push)

If that's what you see, your local git repo still points to aur4 , which doesn't work anymore.
Delete the old local repo and recreate it with git clone .

True, but cloning does not work (see post from "10:12:48")

mauritiusdadd

Member

From: Benevento, Italy

Registered: 2013-10-27

Posts: 776

Re: aur.archlinux.org git authentification problem

I'll ask the obvious question, is that the correct filename in IdentifyFile?

Edit: oh, and the common mistake, is there newlines in the public key you copied to the AUR web interface?

heres my profile

https://code.zmaw.de/attachments/downlo … rofile.png

there is no newline at the end of the string

And, by any chance, is there a whitespace at the end of the string?

---

About me - github

-- When you have eliminated the impossible, whatever remains, however improbable, must be the truth -- Spock | Sherlock Holmes

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,729

Re: aur.archlinux.org git authentification problem

You could also try `ssh -v aur.archlinux.org`, see if it gives you any more information (-vvv is also an option, but -v is usually enough).

stark.dreamdetective

Member

Registered: 2015-10-30

Posts: 5

Re: aur.archlinux.org git authentification problem

You could also try `ssh -v aur.archlinux.org`, see if it gives you any more information (-vvv is also an option, but -v is usually enough).

Thanks! It seems that I have a miss-configured .ssh/config

OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015
debug1: Reading configuration data /home/ram/.ssh/config
debug1: /home/ram/.ssh/config line 29: Applying options for aur.archlinux.org
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to aur.archlinux.org [5.9.250.164] port 22.
debug1: Connection established.
debug1: identity file /home/ram/.ssh/id_aur type 4
debug1: key_load_public: No such file or directory
debug1: identity file /home/ram/.ssh/id_aur-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.1
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.1
debug1: match: OpenSSH_7.1 pat OpenSSH* compat 0x04000000
debug1: Authenticating to aur.archlinux.org:22 as 'ram'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr umac-64-etm@openssh.com zlib@openssh.com
debug1: kex: client->server aes128-ctr umac-64-etm@openssh.com zlib@openssh.com
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:L71Q91yHwmHPYYkJMDgj0xmUuw16qFOhJbBr1mzsiOI
debug1: Host 'aur.archlinux.org' is known and matches the ECDSA host key.
debug1: Found key in /home/ram/.ssh/known_hosts:21
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Skipping ssh-ed25519 key /home/ram/.ssh/id_aur for not in PubkeyAcceptedKeyTypes
debug1: No more authentication methods to try.
Permission denied (publickey).

at least miss-configured for aur, because within my network the latest key-types are not supported. With a proper setup for the "PubkeyAcceptedKeyTypes" variable, I could make it run again.

Thanks to all of you for your help!

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,729

Re: aur.archlinux.org git authentification problem

debug1: Authenticating to aur.archlinux.org:22 as 'ram'

Yep, that's wrong.