1306675 - Error pushing to hg.mozilla.org - Permission denied (publickey).

Status: RESOLVED FIXED

(Infrastructure & Operations :: MOC: Service Requests, task)

Description

[Jesper Kristensen]

When I try to push to try, I get this error:
Permission denied (publickey).

I get the same error when I try to use this command:

ssh hg.mozilla.org

It worked last time I tried some months ago. I have not changed anything locally as far as I know. I tried looking for some documentation to check if I have set up everything correctly, but I could not find any.

My LDAP username is mail at jesperkristensen.dk

My SSH key is shown when I log in on https://login.mozilla.com/ssh_keys_index

Comment 1

[Keegan Ferrando [:fauweh]]

I confirm I can see pubkey mismatch on the server. Over to vinh to check out.

"Failed publickey for [mail at jesperkristensen.dk]"

Comment 2

[Vinh Hua [:vinh]]

Jesper - can you attach your rsa public keys.

Comment 3

[Jesper Kristensen]

I think it is this one:

ssh-dss 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

Comment 4

[Vinh Hua [:vinh]]

Jesper - Similar to bug 1291619, you will need to upload *RSA* version of your public keys.  I see that you currently have *DSA* version keys instead.

Comment 5

[Jesper Kristensen]

As I said in my original description, I made the key and set up my machine to use the key many years ago, and I cannot remember exactly how I did it. Can you point me to some documentation on how to set things up for pushing to hg.mozilla.org, since I cannot find any?

Comment 6

[Vinh Hua [:vinh]]

http://mozilla-version-control-tools.readthedocs.io/en/latest/hgmozilla/index.html

Comment 7

[Jesper Kristensen]

If I understand that guide correctly, I should only set up ~/.ssh/config with my Mozilla LDAP username, and I shouldn't use an SSH key. Is that correct? I guess hg is somehow trying to use my key when it should not. Do you know how to tell hg to not use a key?

Comment 8

[Peter Radcliffe [:pir]]

Incorrect. You need to use an ssh key for auth and that key needs to be on your Mozilla account. I would recommend listing the key specifically in the ssh config entry for hg.mozilla.org.

Something like (replacing username@domain with the email address associated with your mozilla account):

Host hg.mozilla.org
  User username@domain
  ForwardX11 no
  IdentityFile ~/.ssh/id_rsa_key_mozilla


You will still need to replace your DSA key with an RSA key (there was email sent out to hg user some time ago about DSA keys being depreciated). There are various guides on the internet to generating a new RSA key on whatever operating system you use. Then go to login.mozilla.com, remove the old key and add the new key.

Comment 9

[Jesper Kristensen]

Thanks!