221467 - I need to renew my access to stage.mozilla.org

Status: RESOLVED INVALID

(mozilla.org :: FTP: Staging, task)

Description

[Jim Dunn]

For some reason, just recently I started receiving errors when
trying to connect to stage.mozilla.org.  It seems to have started
when stage changed IP's.  After talking with Shanmu I figured I should
regen my ssh-keys.

Comment 1

[Jim Dunn]

Attachment: public key generated as "ssh-keygen -d"

Hopefully this will work... can you please update my key?
Thanks!

Comment 2

[Myk Melez [:myk] [@mykmelez]]

Jim, you shouldn't need a new key, although you may need to update your hosts
file if it contains a hardcoded IP address for stage.  What errors are you getting?

Comment 3

[Jim Dunn]

Attachment: ssh -v -v -v -l jdunn stage.mozilla.org

Here is the ssh output debug messages I get with the new key.
And what I was seeing (I belive) with my old key.

I did update my known_hosts file, but no luck.	At this point I tried so
many things, i am not even sure of my original key.  This used to work fine
but I didn't use it for about 3 weeks and now it doesn't.  I am almost
wondering if it might be do to you (mozilla.org) not being able to reverse
dns my host.  My machine sits behind a router on my own private network
behind RoadRunner's DHCP server.  So my machine doesn't have a real
dedicated IP backed up by a DNS server/entry.  Did you change anything on that 

end?

Comment 4

[Christian Reis]

Jim, the following lines indicate that you lack an identity file to be used for
authentication -- do they not exist in your local directory?

debug1: Trying private key: /home/jdunn/.ssh/identity
debug3: no such identity: /home/jdunn/.ssh/identity
debug1: Trying private key: /home/jdunn/.ssh/id_rsa
debug3: no such identity: /home/jdunn/.ssh/id_rsa
debug1: Offering public key: /home/jdunn/.ssh/id_dsa

Comment 5

[Jim Dunn]

This is weird... 
I don't have "identity" but the others exist.  I have
never had a ~/.ssh/identity, even when this worked.
How do I generate it?

Comment 6

[Christian Reis]

It's generated using ssh-keygen -t rsa1. It may or may not be required.

Are permissions okay on these files? It seems as if they're not getting seen by ssh.

Comment 7

[Christian Reis]

Sorry, knob got the best of me :-(

Comment 8

[Christian Reis]

Actually, it seems that your DSA key *is* being sent over, as per the last line:

  debug1: Offering public key: /home/jdunn/.ssh/id_dsa

I don't see a matching reply, but I assume it's being rejected. Possibilities
might include:

  - the server doesn't support DSA authentication
  - the server doesn't have a copy of your public DSA key stored
  - the server stored a public key which doesn't match yours

Comment 9

[Jim Dunn]

After playing with it some more, I finally got this working
(luckily I had an old copy of my keys laying around).
Sorry for the inconvenience & trouble.