SSH problems attempting to access hg.python.org
Hi folks,
After getting some publickey errors from hg.python.org earlier, I'm now consistently getting "Too many authentication failures for hg".
I've checked my SSH keys, and they're validating against other services OK, so this appears to be a problem with hg.python.org specifically.
Could someone with the appropriate admin access take a look at the server and see what might be going on?
Regards, Nick.
P.S. Relevant public key fingerprint (in both MD5 and SHA256 format):
2048 MD5:07:7b:9c:2f:f1:e4:bb:f7:a2:2a:c9:f1:2e:6d:f1:ec ncoghlan@llamedos (RSA) 2048 SHA256:kz2qX96utlWroXvMf75x2WFiL0o2SEeHnX7eJStd3wc ncoghlan@llamedos (RSA)
-- Nick Coghlan | ncoghlan@gmail.com | Brisbane, Australia
What does ssh-add -L give? ssh basically throws keys at the server
until the server accepts it. The server has a limit of two attempts, so
if have more than two keys in your agent, problems result.
On Thu, Oct 1, 2015, at 01:57, Nick Coghlan wrote:
Hi folks,
After getting some publickey errors from hg.python.org earlier, I'm now consistently getting "Too many authentication failures for hg".
I've checked my SSH keys, and they're validating against other services OK, so this appears to be a problem with hg.python.org specifically.
Could someone with the appropriate admin access take a look at the server and see what might be going on?
Regards, Nick.
P.S. Relevant public key fingerprint (in both MD5 and SHA256 format):
2048 MD5:07:7b:9c:2f:f1:e4:bb:f7:a2:2a:c9:f1:2e:6d:f1:ec ncoghlan@llamedos (RSA) 2048 SHA256:kz2qX96utlWroXvMf75x2WFiL0o2SEeHnX7eJStd3wc ncoghlan@llamedos (RSA)
-- Nick Coghlan | ncoghlan@gmail.com | Brisbane, Australia
python-committers mailing list python-committers@python.org https://mail.python.org/mailman/listinfo/python-committers
On 2 October 2015 at 15:33, Benjamin Peterson <benjamin@python.org> wrote:
What does
ssh-add -Lgive? ssh basically throws keys at the server until the server accepts it. The server has a limit of two attempts, so if have more than two keys in your agent, problems result.
I normally have 3 loaded, but even cutting it back to 1 didn't help:
$ hg pull -u pulling from ssh://hg@hg.python.org/peps remote: Permission denied (publickey). abort: no suitable response from remote hg!
However, I *did* recently upgrade to the Fedora 23 beta, so now I'm wondering if there might be a problem with OpenSSH 7.1p1 and ssh-ed25519 host keys (it's the only remote SSH host I using with an ed25519 key - all the others are still ssh-rsa).
Cheers, Nick.
-- Nick Coghlan | ncoghlan@gmail.com | Brisbane, Australia
On 10/02/2015 09:21 AM, Nick Coghlan wrote:
On 2 October 2015 at 15:33, Benjamin Peterson <benjamin@python.org> wrote:
What does
ssh-add -Lgive? ssh basically throws keys at the server until the server accepts it. The server has a limit of two attempts, so if have more than two keys in your agent, problems result.I normally have 3 loaded, but even cutting it back to 1 didn't help:
$ hg pull -u pulling from ssh://hg@hg.python.org/peps remote: Permission denied (publickey). abort: no suitable response from remote hg!
However, I *did* recently upgrade to the Fedora 23 beta, so now I'm wondering if there might be a problem with OpenSSH 7.1p1 and ssh-ed25519 host keys (it's the only remote SSH host I using with an ed25519 key - all the others are still ssh-rsa).
According to the sshkeys repo, the only key you can use for accessing hg.python.org is ncoghlan@uberwald, a ssh-dss key which will indeed not be offered by openssh 7.x anymore.
Georg
On 3 October 2015 at 01:39, Georg Brandl <g.brandl@gmx.net> wrote:
However, I *did* recently upgrade to the Fedora 23 beta, so now I'm wondering if there might be a problem with OpenSSH 7.1p1 and ssh-ed25519 host keys (it's the only remote SSH host I using with an ed25519 key - all the others are still ssh-rsa).
According to the sshkeys repo, the only key you can use for accessing hg.python.org is ncoghlan@uberwald, a ssh-dss key which will indeed not be offered by openssh 7.x anymore.
Huh, I didn't realise I'd never submitted the RSA key for use on hg.python.org. Ah well, good motivation to finally generate some ed25519 keys of my own :)
Cheers, Nick.
-- Nick Coghlan | ncoghlan@gmail.com | Brisbane, Australia
participants (3)
-
Benjamin Peterson -
Georg Brandl -
Nick Coghlan