Bug 16959

Summary: Please give "ngompa" (= Neal Gompa / Son_Goku) a commit bit/padawan status
Product: Infrastructure Reporter: Shlomi Fish <shlomif>
Component: Account requestAssignee: Sysadmin Team <sysadmin-bugs>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: High CC: mageia, mageia, mageia, ngompa13, pterjan, sysadmin-bugs, tmb
Version: unspecified   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Source RPM: CVE:
Status comment:
Attachments: ssh -v output
mgarepo co output
ssh -vvv output
"ssh -vvv -i id_rsa" output

Description Shlomi Fish 2015-10-14 10:41:56 CEST
Description of problem:

Please give "ngompa" (= Neal Gompa / Son_Goku) an SVN commit bit/packagers' padawan status. He has completed the assignments as an initiate, and I am his mentor.


Reproducible: 

Steps to Reproduce:
Neal Gompa 2015-10-14 10:44:06 CEST

CC: (none) => ngompa13

Comment 1 Shlomi Fish 2015-10-16 11:09:13 CEST
Hi all!

Any news?
Comment 2 Thomas Backlund 2015-10-16 11:12:35 CEST
Account promoted

rmember to add ssh key on identity

Status: NEW => RESOLVED
Resolution: (none) => FIXED
CC: (none) => tmb

Comment 3 Shlomi Fish 2015-10-16 11:29:15 CEST
(In reply to Thomas Backlund from comment #2)
> Account promoted
> 
> rmember to add ssh key on identity

Thanks!
Comment 4 Neal Gompa 2015-10-19 15:23:10 CEST
I added my SSH key to the system, but I remain unable to use svn+ssh protocol. I cannot checkout, import, nor commit anything.

Status: RESOLVED => REOPENED
Resolution: FIXED => (none)

Comment 5 Shlomi Fish 2015-10-19 15:32:52 CEST
Hi Neal,

(In reply to Neal Gompa from comment #4)
> I added my SSH key to the system, but I remain unable to use svn+ssh
> protocol. I cannot checkout, import, nor commit anything.

sorry to hear that - can you paste your SSH log?
Comment 6 Neal Gompa 2015-10-19 15:35:22 CEST
Created attachment 7143 [details]
ssh -v output
Comment 7 Neal Gompa 2015-10-19 15:38:47 CEST
Created attachment 7144 [details]
mgarepo co output
Comment 8 Neal Gompa 2015-10-19 15:39:46 CEST
I've attached outputs from ssh and mgarepo. I don't know of any other logs to give...
Comment 9 Neal Gompa 2015-10-21 07:04:17 CEST
This continues to be a problem.

At this point, I've completely stalled on my efforts to complete my work[0] because I have no idea why I can't use svn+ssh protocol... 

[0]: https://wiki.mageia.org/en/Feature:Add_DNF_as_Alternate_Repository_Manager
Comment 10 Neal Gompa 2015-10-21 07:37:35 CEST
Created attachment 7154 [details]
ssh -vvv output
Comment 11 Rémi Verschelde 2015-10-21 07:52:26 CEST
Usually it's an issue with our fail2ban being overly zealous and outright banning new SSH users, at least that's how I understand it. Colin has had to unban every other new SSH committer for years, and it's probably still what has to be done here.

CC: (none) => mageia, mageia, pterjan
Priority: Normal => High

Comment 12 Sander Lepik 2015-10-21 07:57:15 CEST
I'm not so sure about fail2ban here..

debug1: Connecting to svn.mageia.org [212.85.158.147] port 22.
debug1: Connection established.

Connection is established..

Neal, can you specify exact key and try then? You seem to have a lot of keys there..

CC: (none) => mageia

Comment 13 Neal Gompa 2015-10-21 08:02:59 CEST
I only have one key. SSH evaluates for all supported ones, but it returns -1 for all the ones that it doesn't find.
Comment 14 Neal Gompa 2015-10-21 08:05:11 CEST
Created attachment 7155 [details]
"ssh -vvv -i id_rsa" output

Here's what the output looks like when I specify the identity file.
Comment 15 Pascal Terjan 2015-10-21 10:14:43 CEST
I don't see any log from your user on the server so would need your ip.
It seems indeed the problem is likely to be your ip being banned after a few failed attempts.
Comment 16 Pascal Terjan 2015-10-21 10:16:21 CEST
Found it in older logs:

Oct 13 17:12:26 valstar sshd[27919]: Invalid user ngompa from [...]

And indeed that IP was banned.
Comment 17 Colin Guthrie 2015-10-21 10:18:24 CEST
(In reply to Pascal Terjan from comment #16)
> Found it in older logs:
> 
> Oct 13 17:12:26 valstar sshd[27919]: Invalid user ngompa from [...]
> 
> And indeed that IP was banned.

FYI, see ~/colin/denyhosts-purge-ip to purge IPs from denyhosts. Not sure if there is a better way. Sometimes you need to use hostnames too. We'll hopefully get something a bit more robust and controllable when the new valstar comes up.
Comment 18 Pascal Terjan 2015-10-21 10:21:36 CEST
Thanks, stopping it *before* removing the line would have saved me some "file was modified since reading it" failed attempts :)
Comment 19 Neal Gompa 2015-10-21 16:31:13 CEST
It seems to be working now

Status: REOPENED => RESOLVED
Resolution: (none) => FIXED