gitosis asking for password

gitosis asking for password

[Tim Guirgies]

[-- Attachment #1: Type: text/plain, Size: 1870 bytes --]

Hi List,

I've been at this for a few days now, to no avail.  It all began when
gitosis stopped liking me, and whenever I tried to fetch from or push to
my gitosis server, it gave me a 'fatal: x does not appear to be a git
repo' error.

So, I decided to remove gitosis and start again afresh.  Following this
[1] guide, I did/got the following:


$ sudo adduser --system --shell /bin/sh --gecos 'git version control'
--group --disabled-password --home /home/gitosis gitosis
Adding system user `gitosis' (UID 119) ...
Adding new group `gitosis' (GID 128) ...
Adding new user `gitosis' (UID 119) with group `gitosis' ...
Creating home directory `/home/gitosis' ...

$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/tim/.ssh/id_rsa): 
Created directory '/home/tim/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/tim/.ssh/id_rsa.
Your public key has been saved in /home/tim/.ssh/id_rsa.pub.
...

$ sudo -H -u gitosis gitosis-init < /home/tim/.ssh/id_rsa.pub 
Initialized empty Git repository in
/home/gitosis/repositories/gitosis-admin.git/
Reinitialized existing Git repository in
/home/gitosis/repositories/gitosis-admin.git/

$ git clone gitosis@overlord.imperial.fleet:gitosis-admin
Cloning into gitosis-admin...
gitosis@overlord.imperial.fleet's password: 
Permission denied, please try again.


Of course, it's not meant to ask me for a password, and no matter what I
type, it won't work anyway, as it's disabled.

So, did I miss something?  Does anybody know some gitosis magic?


Tim


[1] http://scie.nti.st/2007/11/14/hosting-git-repositories-the-easy-and-secure-way

-- 
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org   - against proprietary attachments

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

Re: gitosis asking for password

[Matthieu Moy]

Tim Guirgies <lt.infiltrator@gmail.com> writes:

> So, I decided to remove gitosis and start again afresh.  Following this
> [1] guide, I did/got the following:

Gitosis is no longer maintained. You should probably be trying gitolite
instead.

> $ git clone gitosis@overlord.imperial.fleet:gitosis-admin
> Cloning into gitosis-admin...
> gitosis@overlord.imperial.fleet's password: 
> Permission denied, please try again.

If it asks for password, then it's probably a plain SSH problem. Try
reproducing it with e.g.

ssh gitosis@overlord.imperial.fleet

or

ssh -vvv gitosis@overlord.imperial.fleet

to see what's going on. Look at ~/.ssh/authorized_keys on the server.

-- 
Matthieu Moy
http://www-verimag.imag.fr/~moy/

Re: gitosis asking for password

[Tim Guirgies]

[-- Attachment #1: Type: text/plain, Size: 2227 bytes --]

On Tue, May 31, 2011 at 06:01:05PM +0200, Matthieu Moy wrote:
> Gitosis is no longer maintained. You should probably be trying gitolite
> instead.

Ah; well, I guess now's as good a time as any to migrate to gitolite
then.  I set up gitosis a few years ago and it hadn't been giving me any
problems.


> If it asks for password, then it's probably a plain SSH problem. Try
> reproducing it with e.g.
...
> ssh -vvv gitosis@overlord.imperial.fleet

I did this just to see, and this is quite interesting:

debug3: Not a RSA1 key file /home/tim/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'Proc-Type:'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'DEK-Info:'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace   (x~20)
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/tim/.ssh/id_rsa type 1
...
debug2: key: /home/tim/.ssh/id_rsa (0x7f7c8f0f7020)
debug2: key: /home/tim/.ssh/id_dsa ((nil))
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred
gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/tim/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /home/tim/.ssh/id_dsa
debug3: no such identity: /home/tim/.ssh/id_dsa
debug2: we did not send a packet, disable method
...

That is very odd, as I didn't change anything after ssh-keygen and
gitosis-init.  I suppose it's irrelevant anyway, as I'll be switching to
gitolite.

Thanks for the advice, and sorry about the noise.


Tim

-- 
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org   - against proprietary attachments

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

gitosis asking for password

[Tim Guirgies]

[-- Attachment #1: Type: text/plain, Size: 2147 bytes --]

Hi List,

I've been trying to sort this out for a couple of days now, but have
gotten absolutely nowhere.

For some reason, a few days ago, gitosis just stopped liking me, and I
was unable to push or fetch from my gitosis server, getting the error
message 'fatal: x does not appear to be a git repo'.

So, I decided to remove gitosis and start again.  Following this [1]
guide, this is what I did/got:

$ sudo adduser --system --shell /bin/sh --gecos 'git version control' --group --disabled-password --home /home/gitosis gitosis
Adding system user `gitosis' (UID 119) ...
Adding new group `gitosis' (GID 128) ...
Adding new user `gitosis' (UID 119) with group `gitosis' ...
Creating home directory `/home/gitosis' ...

$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/tim/.ssh/id_rsa): 
Created directory '/home/tim/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/tim/.ssh/id_rsa.
Your public key has been saved in /home/tim/.ssh/id_rsa.pub.
The key fingerprint is:
bb:04:a6:f0:68:e8:4f:89:0b:60:6e:35:5b:29:50:58 tim@overlord.imperial.fleet

$ sudo -H -u gitosis gitosis-init < /home/tim/.ssh/id_rsa.pub 
Initialized empty Git repository in
/home/gitosis/repositories/gitosis-admin.git/
Reinitialized existing Git repository in
/home/gitosis/repositories/gitosis-admin.git/

$ git clone gitosis@overlord.imperial.fleet:gitosis-admin
Cloning into gitosis-admin...
gitosis@localhost's password: 

But of course, it shouldn't be asking me for a password, and nothing I
type will work anyway, as it's a disabled password.

I've tried it a few times, completely purging the gitosis user and its
home directory, but with the same results.  Has anybody had similar
experiences?  Or does somebody know some magic trick to get gitosis
working?  Did I miss a step?


Tim


[1] http://scie.nti.st/2007/11/14/hosting-git-repositories-the-easy-and-secure-way

-- 
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org   - against proprietary attachments

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

Re: gitosis asking for password

[Drew Northup]

On Wed, 2011-06-01 at 01:42 +1000, Tim Guirgies wrote:
> Hi List,
> 
> I've been trying to sort this out for a couple of days now, but have
> gotten absolutely nowhere.
> 
> For some reason, a few days ago, gitosis just stopped liking me, and I
> was unable to push or fetch from my gitosis server, getting the error
> message 'fatal: x does not appear to be a git repo'.
> 
> So, I decided to remove gitosis and start again.  Following this [1]
> guide, this is what I did/got:
<snip>

> $ git clone gitosis@overlord.imperial.fleet:gitosis-admin
> Cloning into gitosis-admin...
> gitosis@localhost's password: 
> 
> But of course, it shouldn't be asking me for a password, and nothing I
> type will work anyway, as it's a disabled password.
> 
> I've tried it a few times, completely purging the gitosis user and its
> home directory, but with the same results.  Has anybody had similar
> experiences?  Or does somebody know some magic trick to get gitosis
> working?  Did I miss a step?

> [1] http://scie.nti.st/2007/11/14/hosting-git-repositories-the-easy-and-secure-way

Hi Tim,
You'll notice that the year on that is 2007. I seem to recall the lack
of support factor is [a large part of] why Sitaram Chamarty gave the
world Gitolite (https://github.com/sitaramc/gitolite ). 
You may still be able to find some help with Gitosis, but I'd not risk
blacking out due to holding my breath too long if I were you.

-- 
-Drew Northup
________________________________________________
"As opposed to vegetable or mineral error?"
-John Pescatore, SANS NewsBites Vol. 12 Num. 59