Re: Doing a push to my user git repository

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 5521 bytes --]

Hello,

I just ran into this again when using non-Kerberos authentication from a different host (a build server).

This is very annoying and I had to several times unblock myself.

@Peter: Could you please have a look at this again.

-Michael

> On 11 Jun 2021, at 11:18, Michael Tremer <michael.tremer(a)ipfire.org> wrote:
> 
> Hello,
> 
>> On 11 Jun 2021, at 11:11, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>> 
>> Hi Michael,
>> 
>> On 11/06/2021 11:31, Michael Tremer wrote:
>>> Hello,
>>>> On 10 Jun 2021, at 18:38, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>>> 
>>>> Hi Michael,
>>>> 
>>>> On 10/06/2021 14:41, Michael Tremer wrote:
>>>>> Hello,
>>>>>> On 10 Jun 2021, at 13:39, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>>>>> 
>>>>>> Hallo Michael,
>>>>>> 
>>>>>> On 10/06/2021 13:13, Michael Tremer wrote:
>>>>>>> Hello Adolf,
>>>>>>> We do not use SSH keys in our infrastructure. Instead we use Kerberos authentication.
>>>>>>> For that, you do not have to do anything apart from authenticating using a password as usual. In the background the server will acquire a Kerberos ticket automatically.
>>>>>>> You should be able to log in at people.ipfire.org using SSH with your username and your password. Can you check if that works?
>>>>>> After adding a Match Host command to my ssh_config to allow password authentication I was able to login with ssh to people.ipfire.org. It immediately logged me out again with the following message:-
>>>>>> 
>>>>>> fatal: Interactive git shell is not enabled.
>>>>>> hint: ~/git-shell-commands should exist and have read and execute access.
>>>>>> Connection to people.ipfire.org closed.
>>>>>> 
>>>>>> Reading about this I suspect that is expected because I should not be working with git interactively but it proves that my ssh connection is working.
>>>>> Yes, this is correct. This was just to test the SSH connection.
>>>>>> I will now try out accessing my user repository via ssh and seeing if that works.
>>>>> You should be able to push things to this repository by setting it up as a remote repository first:
>>>>>  git remote add bonnietwin ssh://bonnietwin(a)people.ipfire.org/…
>>>>> And then use pull and push :)
>>>> Struggling to make this work. If I just use ssh://bonnietwin(a)people.ipfire.org/ as above then I get the following message when I try a push.
>>>> 
>>>> fatal: '/' does not appear to be a git repository
>>>> fatal: Could not read from remote repository.
>>> The full path is on the gitweb page here: https://git.ipfire.org/?p=people/bonnietwin/ipfire-2.x.git;a=summary
>>>  ssh://bonnietwin(a)people.ipfire.org/pub/git/people/bonnietwin/ipfire-2.x.git
>> That seems so obvious today when you show it but I failed to see it yesterday.
>> Anyway it has worked for me today and I have done my first successful push to my repository.
>> Thanks very much. :-)
> 
> Yay \o/
> 
>>>> I tried adding bonnietwin/ipfire-2.x.git/ to the end of the url but that gave the same error message.Basically just a guess on my part but it was wrong.
>>>> Looking at my user repository in a browser the url is completely different so I have no idea what I need to use for the url for my repository when accessing it via ssh.
>>>> 
>>>> I suspect that I have made more than the allowed errors as I now can't even connect any more and get the following message:-
>>>> 
>>>> ssh: connect to host people.ipfire.org port 22: Network is unreachable
>>>> fatal: Could not read from remote repository.
>>> LOL. This shouldn’t happen if you authenticate properly. If this locks you out again send a note to Peter to have a look at this.
>> I suspect Fail2Ban just looks at the frequency of attempts whether they are authenticated or not.
>> Shouldn't be a problem in the future because I won't be trying multiple different paths over a short time period. :-)
> 
> Yes, but it seems to count unsupported authentication methods as a failed attempt. But hey, at least it works for now...
> 
>>>> Not sure if this will be accessible again after some time or if I am permanently blocked and need it to be released.
>>> It is a temporary block and should be working again now.
>>>> Either way I need and would appreciate some guidance.
>>> If you need anything else, just let me know.
>> Thanks very much for the help. That has got me going and hopefully I should be able to figure most things out that I will need.
> 
> :)
> 
> -Michael
> 
>> 
>> Regards,
>> Adolf.
>>> -Michael
>>>> 
>>>> Regards,
>>>> 
>>>> Adolf.
>>>>> -Michael
>>>>>> 
>>>>>> Thanks for the help.
>>>>>> 
>>>>>> Adolf.
>>>>>>> -Michael
>>>>>>>> On 10 Jun 2021, at 12:00, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>>>>>>> 
>>>>>>>> Hi All,
>>>>>>>> 
>>>>>>>> Sorry for my lack of activities over the last period but I had some non-computing issues to deal with.
>>>>>>>> 
>>>>>>>> Back again now and starting to look through some previous stuff.
>>>>>>>> 
>>>>>>>> The user git repository that I have available. Reading through the wiki it looks like I need to use ssh to access it and do a push of any local changes to my user repository.
>>>>>>>> 
>>>>>>>> I have created an ssh key but the public file will need to be put into the git repository server. Do I just need to send the public key to this distribution list or is there some other process to get it added.
>>>>>>>> 
>>>>>>>> 
>>>>>>>> Regards,
>>>>>>>> Adolf.
>>>>>> 
>>>>>> -- 
>>>>>> Sent from my laptop