Created attachment 22410 [details]
SSH public key

Dear sitewranglers,

Please approve this request.

Cheers,
Waldo

anholt@gaiman:anholt/src/linux-2.6-din% gpg --list-keys yuan
pub   2048R/B784D2EE 2009-01-31
uid                  Yuan Shengquan (Austin Yuan) <shengquan.yuan@intel.com>

Your GPG key is a signing-only RSA key.  You need an encrypting GPG key to create an account.

Created attachment 23727 [details]
GPG public key

Hi, Eric, 

I update my GPG public key. 
Thanks for your time.

Austin

I put my private and public SSH key into ~/.ssh/ and tried to use my account to clone a tree, but it always asks a password, e.g.

[AustinYuan@localhost ~]$ git clone ssh://AustinYuan@git.freedesktop.org/git/libva
> Initialized empty Git repository in /home/AustinYuan/libva/.git/
> The authenticity of host 'git.freedesktop.org (<no hostip for proxy
> command>)' can't be established.
> RSA key fingerprint is 95:b5:28:3d:9b:37:55:d4:fc:3d:99:b4:06:9d:9b:5f.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added 'git.freedesktop.org' (RSA) to the list of
> known hosts.
> Password:
>

I also tried to "echo 'show' | gpg --clearsign | mail change@db.freedesktop.org", and it can get my account information back

and here is output of my "ssh -vvv AustinYuan@people.freedesktop.org" (it also asks a password)

> OpenSSH_5.0p1, OpenSSL 0.9.8g 19 Oct 2007
> debug1: Reading configuration data /home/AustinYuan/.ssh/config
> debug1: Applying options for *.freedesktop.org
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Executing proxy command: exec corkscrew 172.17.125.36 911
> people.freedesktop.org 22
> debug1: permanently_drop_suid: 502
> debug1: identity file /home/AustinYuan/.ssh/identity type -1
> debug3: Not a RSA1 key file /home/AustinYuan/.ssh/id_rsa.
> debug2: key_type_from_name: unknown key type '-----BEGIN'
> debug3: key_read: missing keytype
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug3: key_read: missing whitespace
> debug2: key_type_from_name: unknown key type '-----END'
> debug3: key_read: missing keytype
> debug1: identity file /home/AustinYuan/.ssh/id_rsa type 1
> debug1: identity file /home/AustinYuan/.ssh/id_dsa type -1
> debug1: Remote protocol version 2.0, remote software version
> OpenSSH_4.7p1 Debian-9fdo1
> debug1: match: OpenSSH_4.7p1 Debian-9fdo1 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-OpenSSH_5.0
> debug2: fd 5 setting O_NONBLOCK
> debug2: fd 4 setting O_NONBLOCK
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug2: kex_parse_kexinit:
> diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
> debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
> debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
> debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
> debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
> debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
> debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
> debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit: first_kex_follows 0
> debug2: kex_parse_kexinit: reserved 0
> debug2: kex_parse_kexinit:
> diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
> debug2: kex_parse_kexinit: ssh-rsa
> debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
> debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
> debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
> debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
> debug2: kex_parse_kexinit: none,zlib@openssh.com
> debug2: kex_parse_kexinit: none,zlib@openssh.com
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit: first_kex_follows 0
> debug2: kex_parse_kexinit: reserved 0
> debug2: mac_setup: found hmac-md5
> debug1: kex: server->client aes128-cbc hmac-md5 none
> debug2: mac_setup: found hmac-md5
> debug1: kex: client->server aes128-cbc hmac-md5 none
> debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
> debug2: dh_gen_key: priv key bits set: 123/256
> debug2: bits set: 500/1024
> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> debug3: check_host_in_hostfile: filename /home/AustinYuan/.ssh/known_hosts
> debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
> debug3: check_host_in_hostfile: filename /home/AustinYuan/.ssh/known_hosts
> debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
> debug2: no key of type 0 for host people.freedesktop.org
> debug3: check_host_in_hostfile: filename /home/AustinYuan/.ssh/known_hosts2
> debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts2
> debug3: check_host_in_hostfile: filename /home/AustinYuan/.ssh/known_hosts
> debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
> debug2: no key of type 2 for host people.freedesktop.org
> The authenticity of host 'people.freedesktop.org (<no hostip for proxy
> command>)' can't be established.
> RSA key fingerprint is 32:3e:0c:df:0a:c8:a6:33:72:9c:6c:ba:68:58:d2:30.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added 'people.freedesktop.org' (RSA) to the list
> of known hosts.
> debug2: bits set: 512/1024
> debug1: ssh_rsa_verify: signature correct
> debug2: kex_derive_keys
> debug2: set_newkeys: mode 1
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: expecting SSH2_MSG_NEWKEYS
> debug2: set_newkeys: mode 0
> debug1: SSH2_MSG_NEWKEYS received
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug2: service_accept: ssh-userauth
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug2: key: /home/AustinYuan/.ssh/identity ((nil))
> debug2: key: /home/AustinYuan/.ssh/id_rsa (0xb7fde0a0)
> debug2: key: /home/AustinYuan/.ssh/id_dsa ((nil))
> debug1: Authentications that can continue: publickey,keyboard-interactive
> debug3: start over, passed a different list publickey,keyboard-interactive
> debug3: preferred gssapi-with-mic,publickey,keyboard-interactive,password
> debug3: authmethod_lookup publickey
> debug3: remaining preferred: keyboard-interactive,password
> debug3: authmethod_is_enabled publickey
> debug1: Next authentication method: publickey
> debug1: Trying private key: /home/AustinYuan/.ssh/identity
> debug3: no such identity: /home/AustinYuan/.ssh/identity
> debug1: Offering public key: /home/AustinYuan/.ssh/id_rsa
> debug3: send_pubkey_test
> debug2: we sent a publickey packet, wait for reply
> debug1: Authentications that can continue: publickey,keyboard-interactive
> debug1: Trying private key: /home/AustinYuan/.ssh/id_dsa
> debug3: no such identity: /home/AustinYuan/.ssh/id_dsa
> debug2: we did not send a packet, disable method
> debug3: authmethod_lookup keyboard-interactive
> debug3: remaining preferred: password
> debug3: authmethod_is_enabled keyboard-interactive
> debug1: Next authentication method: keyboard-interactive
> debug2: userauth_kbdint
> debug2: we sent a keyboard-interactive packet, wait for reply
> debug2: input_userauth_info_req
> debug2: input_userauth_info_req: num_prompts 1
> Password:
>

I tested my SSH key on local intranet, and it is workable.

Since I can get my account information by  "echo 'show' | gpg --clearsign | mail
change@db.freedesktop.org", I think my GPG is also working.

I searched some bugs of account request, and found someone else met the same issue, but the reason was variable. One possible reason is that the account may not be added into a group, and from my account information, it seems I am in libva group (I saw supplementaryGid: libva), is there "libva" group?  Or I am in a group?

Thanks
Austin

Hi Austin,
  The problem should now be fixed. The issue is you can set a user to be in a group even if the group doesn't exist. I've now created the group and also made the libva.git repo to be group owned by it. Your login should now work - sorry it took so long to actually get this working.

Hi, 

Now I can log into people.freedesktop.org, and also can clone a project using my account. However, when I tried to commit a modification into "libva" project, I got some errors (no home directory in git.freedesktop.org?), Here is my steps:

(1) clone libva project
[AustinYuan@localhost libva]$ git clone ssh://AustinYuan@git.freedesktop.org/git/libva

(2) did some modification to libva repository

(3) check in the modification

[AustinYuan@localhost libva]$ git push origin master
Could not chdir to home directory /home/AustinYuan: No such file or directory
Counting objects: 7, done.
Compressing objects: 100% (4/4), done.
Writing objects: 100% (4/4), 372 bytes, done.
Total 4 (delta 3), reused 0 (delta 0)
error: unable to create temporary sha1 filename ./objects/tmp_obj_dxu2Yf: Permission denied

fatal: failed to write object
error: unpack failed: unpacker exited with error code
To ssh://AustinYuan@git.freedesktop.org/git/libva
 ! [remote rejected] master -> master (n/a (unpacker error))

==================================

Thanks
Austin

Reopen the bug

I found bug 8067 had the same problem as I met, and it was caused by group difference of project and account.
 
Is "libva" project part of "libva" group? Or should I have a home directory on git.freedesktop.org?

Thanks
Austin

==========cut from bug 8067:
------- Comment #38 From Reşat SABIQ (Reshat) 2009-01-28 22:57:45 PST [reply] ------- git push origin
continues to fail, even on trivial commit attempts with 1-line update in TODO
file. 

From some search results, i gather this issue is caused by the back-end
settings, probably permissions, as the error message mentions.
------- Comment #39 From Benjamin Close 2009-01-28 23:18:49 PST [reply] ------- Fixed, seems xkeyboard-config is in a different group than expected. This was
causing your permission denied issue. I've also fixed your missing home
directory on anarchy

Howdy, 
  Turns out the repo wasn't created with the shared flag hence directories, etc had wrong permissions. Please ignore the /home/AustinYuan error (I think this goes away if you use git+ssh:// rather than ssh://).

Please give that a go and let me know if things don't work.

It is working now.
Thank you very much