Error pushing to hg.mozilla.org - Permission denied (publickey).

RESOLVED FIXED

Status

Infrastructure & Operations
MOC: Service Requests
RESOLVED FIXED
a year ago
a year ago

People

(Reporter: Jesper Kristensen, Assigned: vinh)

Tracking

Details

(Reporter)

Description

a year ago
When I try to push to try, I get this error:
Permission denied (publickey).

I get the same error when I try to use this command:

ssh hg.mozilla.org

It worked last time I tried some months ago. I have not changed anything locally as far as I know. I tried looking for some documentation to check if I have set up everything correctly, but I could not find any.

My LDAP username is mail at jesperkristensen.dk

My SSH key is shown when I log in on https://login.mozilla.com/ssh_keys_index
I confirm I can see pubkey mismatch on the server. Over to vinh to check out.

"Failed publickey for [mail at jesperkristensen.dk]"
Assignee: nobody → vhua
(Assignee)

Comment 2

a year ago
Jesper - can you attach your rsa public keys.
Flags: needinfo?(bugzilla)
(Reporter)

Comment 3

a year ago
I think it is this one:

ssh-dss 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
Flags: needinfo?(bugzilla)
(Assignee)

Comment 4

a year ago
Jesper - Similar to bug 1291619, you will need to upload *RSA* version of your public keys.  I see that you currently have *DSA* version keys instead.
Flags: needinfo?(bugzilla)
(Reporter)

Comment 5

a year ago
As I said in my original description, I made the key and set up my machine to use the key many years ago, and I cannot remember exactly how I did it. Can you point me to some documentation on how to set things up for pushing to hg.mozilla.org, since I cannot find any?
Flags: needinfo?(bugzilla)
(Reporter)

Comment 7

a year ago
If I understand that guide correctly, I should only set up ~/.ssh/config with my Mozilla LDAP username, and I shouldn't use an SSH key. Is that correct? I guess hg is somehow trying to use my key when it should not. Do you know how to tell hg to not use a key?
Incorrect. You need to use an ssh key for auth and that key needs to be on your Mozilla account. I would recommend listing the key specifically in the ssh config entry for hg.mozilla.org.

Something like (replacing username@domain with the email address associated with your mozilla account):

Host hg.mozilla.org
  User username@domain
  ForwardX11 no
  IdentityFile ~/.ssh/id_rsa_key_mozilla


You will still need to replace your DSA key with an RSA key (there was email sent out to hg user some time ago about DSA keys being depreciated). There are various guides on the internet to generating a new RSA key on whatever operating system you use. Then go to login.mozilla.com, remove the old key and add the new key.
(Reporter)

Comment 9

a year ago
Thanks!
Status: NEW → RESOLVED
Last Resolved: a year ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.