728025 - Commit Access (Level 1) for Camilo Viecco

Status: RESOLVED FIXED

(mozilla.org :: Repository Account Requests, task)

Description

[Camilo Viecco (:cviecco)]

I need commit access to the try servers to speed up the dev-test cycle.

Comment 1

[Camilo Viecco (:cviecco)]

Attachment: Camilo Viecco, public key.

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

I'll vouch, agree, say yes. :)

Comment 3

[:Gavin Sharp [email: [e-mail]]]

You'll need to submit a committer's agreement to Erica per http://www.mozilla.org/hacking/notification/ , if you haven't already.

Comment 4

[Camilo Viecco (:cviecco)]

I have already submitted the committer agreement to Erica.

Comment 5

[Marcia Knous [:marcia]]

Adding Erica to confirm the form.

Comment 6

[Erica McClure]

I have received Camilo's Committer's Agreement.

Comment 7

[Camilo Viecco (:cviecco)]

Any updates on this?

Comment 8

[Marcia Knous [:marcia]]

Over to server-ops for L1 access.

Comment 9

[Ashish Vijayaram [:ashish]]

+hg, +scm_level_1

Comment 10

[Camilo Viecco (:cviecco)]

Attachment: Log of failed connection

I cannot connect to the try server. I tried manually connecting to the server and it seems like my ssh key is not there. Do you need a dsa key instead?

Comment 11

[:Gavin Sharp [email: [e-mail]]]

That log doesn't show any configuration being applied for hg.mozilla.org specifically (only "*"). You need to configure that in your ~/.ssh/config - it should be your full LDAP adress, e.g.:

Host hg.mozilla.org
  User [e-mail]

Comment 12

[Camilo Viecco (:cviecco)]

Still no luck: (from your last email it seemed like the problem was a username mismatch, but I still have no access:

session log:
------begin----------------
cviecco@cviecco-dell1:~/hg/mozilla-central$ cat ~/.ssh/config 
Host hg.mozilla.org
  User [e-mail]
#   IdentityFile ~/.ssh/id_rsa

cviecco@cviecco-dell1:~/hg/mozilla-central$ hg -v push -f try
pushing to ssh://hg.mozilla.org/try
running ssh hg.mozilla.org 'hg -R try serve --stdio'
remote: Permission denied (publickey,gssapi-with-mic).
abort: no suitable response from remote hg!
cviecco@cviecco-dell1:~/hg/mozilla-central$ hg -v push -f ssh://hg.mozilla.org/try/ -e 'ssh -l [e-mail]'
pushing to ssh://hg.mozilla.org/try/
running ssh -l [e-mail] hg.mozilla.org 'hg -R try/ serve --stdio'
remote: Permission denied (publickey,gssapi-with-mic).
abort: no suitable response from remote hg!

----------End--------
Now if I run the last ssh command with -v looks like the rsa auth is failing, so I tried  

-------begin-------
cviecco@cviecco-dell1:~/hg/mozilla-central$ hg -v push -f ssh://hg.mozilla.org/try/ -e 'ssh -l [e-mail]'
pushing to ssh://hg.mozilla.org/try/
running ssh -l [e-mail] hg.mozilla.org 'hg -R try/ serve --stdio'
remote: Permission denied (publickey,gssapi-with-mic).
abort: no suitable response from remote hg!
cviecco@cviecco-dell1:~/hg/mozilla-central$

-------end--------
Now with direct ssh using the hg command (just in case it is also command filtered)

---------begin------
cviecco@cviecco-dell1:~/hg/mozilla-central$ ssh -v -l '[e-mail]' hg.mozilla.org 'hg -R try/ serve --stdio' 2>&1 |tail -n 15
Credentials cache file '/tmp/krb5cc_1000' not found

debug1: Unspecified GSS failure.  Minor code may provide more information


debug1: Unspecified GSS failure.  Minor code may provide more information


debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/cviecco/.ssh/id_rsa
debug1: Authentications that can continue: publickey,gssapi-with-mic
debug1: Trying private key: /home/cviecco/.ssh/id_dsa
debug1: Trying private key: /home/cviecco/.ssh/id_ecdsa
debug1: No more authentication methods to try.
Permission denied (publickey,gssapi-with-mic).
cviecco@cviecco-dell1:~/hg/mozilla-central$
-------end---------

I am @irc in the privacy and security channels as that could be a faster way for us to figure this out. (I see a gavin in #security)

Comment 13

[:Gavin Sharp [email: [e-mail]]]

Assuming you have a the right private key (the one corresponding to the public key posted here) set up, the next step is probably for someone from server-ops to confirm that your account has all of the right bits set. Ashish?

Comment 14

[Ashish Vijayaram [:ashish]]

Gaah, I was sure I'd seen the ssh key added to ldap. Fixed now.

cviecco - Please try again. Thanks!

Comment 15

[Camilo Viecco (:cviecco)]

Success!