990119 - Commit Access (Level 1) for Maxim Zhilyaev

Status: RESOLVED FIXED

(mozilla.org :: Repository Account Requests, task)

Description

[maxim zhilyaev]

Attachment: SSH public key

Please use [e-mail] as login name

Comment 1

[Ed Lee :Mardak]

I'm vouching for max. He's been at Mozilla for 2.5 years working on Labs/add-on stuff, but now we're doing more mozilla-central hacking (in addition to continued add-on stuff that we do through GitHub).

He's in the Mountain View office if that helps signing of forms, etc.

Comment 2

[Josh Matthews [:jdm]]

Please leave a note here when you've submitted the signed form to Shannon per http://www.mozilla.org/hacking/committer/.

Comment 3

[maxim zhilyaev]

per above link, Mozilla Committer's Agreement has been delivered to Shannon Armitage

Comment 4

[Josh Matthews [:jdm]]

Waiting on Shannon's confirmation.

Comment 5

[Marcia Knous [:marcia]]

Maxim - Can you please resend the form to [e-mail]?

Comment 6

[maxim zhilyaev]

re-sent

Comment 7

[Marcia Knous [:marcia]]

Over to server-ops for Level 1 access.

Comment 8

[Rick Bryce [:rbryce]]

LDAP account & ssh_key already on file.  
+hg, +scm_level_1

Comment 9

[maxim zhilyaev]

Unable to push to try server.  
The response is bellow:
~/mozilla-central$ hg out 'ssh://hg.mozilla.org/try/'
comparing with ssh://hg.mozilla.org/try/
remote: Permission denied (publickey).
abort: no suitable response from remote hg!

1)  Modified ~/.ssh/config to include
Host hg.mozilla.org
User [e-mail]
IdentityFile ~/.ssh/id_rsa

- Did not help

2) attempted to ssh directly, log is attached
debug3: load_hostkeys: found key type RSA in file /Users/maximzhilyaev/.ssh/known_hosts:13
debug3: load_hostkeys: loaded 1 keys
debug3: load_hostkeys: loading entries for host "63.245.215.25" from file "/Users/maximzhilyaev/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /Users/maximzhilyaev/.ssh/known_hosts:13
debug3: load_hostkeys: loaded 1 keys
debug1: Host 'hg.mozilla.org' is known and matches the RSA host key.
debug1: Found key in /Users/maximzhilyaev/.ssh/known_hosts:13
debug2: bits set: 524/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /Users/maximzhilyaev/.ssh/id_rsa (0x7faba2d00840), explicit
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /Users/maximzhilyaev/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey).
~/mozilla-central$ hg out 'ssh://hg.mozilla.org/try/'
comparing with ssh://hg.mozilla.org/try/
remote: Permission denied (publickey).
abort: no suitable response from remote hg!

Comment 10

[maxim zhilyaev]

It is very possible that my long and hard to spell user name was incorrectly spelled when try server account was set up.

Comment 11

[Rick Bryce [:rbryce]]

(In reply to maxim zhilyaev from comment #10)
> It is very possible that my long and hard to spell user name was incorrectly
> spelled when try server account was set up.

Double checked your account. Your email address, and name spelling are correct.  I changed the comment on your ssh key to force a re-sync.  Check and ensure the permission on your private key is 0600.

Comment 12

[maxim zhilyaev]

Fixed the permission issues, still can not run the try server.
Can someone from help desk debug the issue with me
Currently blocked on it

Comment 13

[maxim zhilyaev]

Currently blocked on it.  Changing priority to major

Comment 14

[maxim zhilyaev]

need urgent help with it

Comment 15

[Rick Bryce [:rbryce]]

Your ldap account for [e-mail] is configured properly. Here are some docs that could help.

https://wiki.mozilla.org/Build:TryServer
https://developer.mozilla.org/en-US/docs/Mercurial_FAQ#How_do_I_check_stuff_in.3f

Comment 16

[Ed Lee :Mardak]

There seems to be a different response from hg.mozilla.org between my access and max's:

mine:

debug1: Server accepts key: pkalg ssh-rsa blen 277
debug2: input_userauth_pk_ok: fp ...
debug3: sign_and_send_pubkey: RSA ...
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).


max:
debug1: Authentications that can continue: publickey
debug1: Trying private key: .../id_dsa
debug3: no such identity: .../id_dsa: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey).

Comment 17

[Ed Lee :Mardak]

For some context, these are the lines just before the 2 differences in comment 16:

debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: .../id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply

Comment 18

[:Gavin Sharp [email: [e-mail]]]

(In reply to Ed Lee :Mardak from comment #16)
> debug1: Trying private key: .../id_dsa
> debug3: no such identity: .../id_dsa: No such file or directory

".../id_dsa" looks suspicious. Does Max's ~/.ssh/config have an IdentityFile line that contains that?

Comment 19

[Ed Lee :Mardak]

He actually explicitly has "IdentityFile ~/.ssh/id_rsa" but the id_dsa seems to be triggered as a fallback because he's not receiving "debug1: Server accepts key: pkalg ssh-rsa blen 277"

Comment 20

[maxim zhilyaev]

Also note that I ssh-ed to a metrics server using the same ssh key-pair
ssh -vvv [e-mail]
...

debug1: Server accepts key: pkalg ssh-rsa blen 279
debug2: input_userauth_pk_ok: fp dc:c0:f2:65:08:8d:03:37:c3:df:9a:00:13:20:78:be
debug3: sign_and_send_pubkey: RSA dc:c0:f2:65:08:8d:03:37:c3:df:9a:00:13:20:78:be
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).

I suspect this is a server misconfiguration since i am able to ssh to a different machine with same key pair as I submitted to this bug.

Comment 21

[:Gavin Sharp [email: [e-mail]]]

Well, the server is working for everyone else :) Do you have something else in your ssh client configuration (either ~/.ssh/config or /etc/ssh_config) that's out of the ordinary?

Comment 22

[maxim zhilyaev]

here are my settings ~/.ssh/config:

Host hg.mozilla.org
User [e-mail]
IdentityFile ~/.ssh/id_rsa

seems to be reasonable

Then I tried explicitly ssh-ing to hg.mozilla.org
>> ssh -vvvv -i ~/.ssh/id_rsa -l '[e-mail]' hg.mozilla.org
Permission denied (publickey).

checked /etc/ssh_config: everything is commented out, but
Host *
   SendEnv LANG LC_*
Host *
   XAuthLocation /opt/X11/bin/xauth

checked permissions:
>> ls -al ~/.ssh/
drwx------   6 maximzhilyaev  staff   204 May 19 13:23 .
drwxr-xr-x  94 maximzhilyaev  staff  3196 May 19 13:21 ..
-rw-r--r--   1 maximzhilyaev  staff   109 May 19 13:18 config
-rw-------   1 maximzhilyaev  staff  1675 Nov  5  2013 id_rsa
-rw-r--r--   1 maximzhilyaev  staff   420 Nov  5  2013 id_rsa.pub
-rw-r--r--   1 maximzhilyaev  staff  4780 May 19 13:20 known_hosts

not sure where else to look....

Comment 23

[Ashish Vijayaram [:ashish]]

maxim - can you retry now? I've cleaned up the ssh keys in LDAP and verified that both keys are in place. Thanks!

Comment 24

[maxim zhilyaev]

All is working!!!!!    THANKS A TON!!!!