| *** tosky has quit IRC | 00:11 | |
| *** yoctozepto has quit IRC | 00:13 | |
| *** yoctozepto has joined #openstack-infra | 00:13 | |
| *** gryf has quit IRC | 00:18 | |
| *** gryf has joined #openstack-infra | 00:21 | |
| *** hamalq has quit IRC | 00:26 | |
| *** jamesdenton has quit IRC | 00:46 | |
| *** jamesden_ has joined #openstack-infra | 00:46 | |
| *** ajitha has joined #openstack-infra | 00:51 | |
| tkajinam | One of my colleagues is seeing "Permission Denied" wen ssh'ing to gerrit but his username and ssh key in gerrit seems to be correct. Is there any suggestion about the items we should check next ? | 01:03 |
|---|---|---|
| clarkb | tkajinam: is this on fedora33 and is the key an rsa key? | 01:03 |
| clarkb | if so they disabled rsa + sha1 hashes in their default openssh configs. rsa + sha2 hashes would work except the way openssh works is if the server doesn't say which hash it can do it falls back to sha1 and gerrit's java sshd doesn't tell the client. | 01:04 |
| clarkb | I think our suggestion in this case is to use a non rsa key if you are a fedora user | 01:05 |
| clarkb | if this isn't the case then I would try ssh -p 29418 -vvv user@review.opendev.org gerrit ls-projects and see if that offers any clues. If it works you'll get a project listing if it doesn't something in the ssh client output should indicate why | 01:05 |
| tkajinam | clarkb, thanks. let me check with him. | 01:06 |
| clarkb | other things to check include make sure you are talking to port 29418 (the default 22 doesn't know about your gerrit user) | 01:06 |
| tkajinam | I'm checking the output of ssh -vv but I think you pointed out the cause | 01:08 |
| tkajinam | I see sha1 is used there instead of sha2 | 01:08 |
| clarkb | tkajinam: and it is a fedora 33 installation? | 01:08 |
| tkajinam | clarkb, yes. | 01:08 |
| clarkb | that is likely it. You should be able to work around this with an ed25519 keypair or ecdsa keypair. Another option is to edit your openssh settings to all rsa + sha1 | 01:09 |
| clarkb | we don't like recommending that second option because we don't want to subvert security defaults chosen by your platform | 01:09 |
| tkajinam | yeah I agree | 01:09 |
| clarkb | note that openssh proper has deprecated rsa + sha1 but not disabled it by default like fedora has. One thing fedora could do to make this work better is fall back to rsa + sha2 instead of rsa + sha1 if the server doesn't specify. rsa + sha1 is going to fail anyway so may as well try to make rsa + sha2 work first then fail if it can't work either | 01:11 |
| clarkb | the ssh rfc indicates this fallback will change at some point in the future (likely when they disable sha1 by default) | 01:12 |
| tkajinam | understood | 01:12 |
| clarkb | we've also tried to convince the mina sshd developers that they should properly support the extension to advertise the rsa variants but their messaging has basically been don't use rsa :/ | 01:12 |
| clarkb | and with that I must now go help with dinner. I'm sure others will still be around if using a different key type doesn't help, but I'm reasonably confident that is the issue if on fedora 33 and using rsa | 01:13 |
| tkajinam | clarkb, yeah I'm still waiting feedback but that is exactly the cause as per the log I got | 01:14 |
| tkajinam | clarkb, thanks again ! | 01:15 |
| *** wolsen has quit IRC | 01:46 | |
| *** ihti[m] has quit IRC | 01:49 | |
| *** wolsen has joined #openstack-infra | 02:06 | |
| *** jamesmcarthur has quit IRC | 02:12 | |
| *** jamesmcarthur has joined #openstack-infra | 02:13 | |
| *** jamesmcarthur has quit IRC | 02:13 | |
| *** jamesmcarthur has joined #openstack-infra | 02:13 | |
| *** rlandy|bbl is now known as rlandy | 02:31 | |
| *** jamesmcarthur has quit IRC | 02:41 | |
| *** jamesmcarthur has joined #openstack-infra | 02:41 | |
| *** irclogbot_3 has quit IRC | 02:52 | |
| *** irclogbot_0 has joined #openstack-infra | 02:55 | |
| *** rlandy has quit IRC | 03:02 | |
| *** gyee has quit IRC | 03:08 | |
| *** psachin has joined #openstack-infra | 03:36 | |
| *** jamesden_ has quit IRC | 04:25 | |
| *** jamesdenton has joined #openstack-infra | 04:25 | |
| *** jamesmcarthur has quit IRC | 04:27 | |
| *** redrobot has quit IRC | 04:27 | |
| *** jamesmcarthur has joined #openstack-infra | 04:27 | |
| *** redrobot has joined #openstack-infra | 04:30 | |
| *** jamesmcarthur has quit IRC | 04:32 | |
| *** redrobot has quit IRC | 04:35 | |
| *** redrobot has joined #openstack-infra | 04:35 | |
| *** ykarel has joined #openstack-infra | 04:38 | |
| *** jamesmcarthur has joined #openstack-infra | 04:51 | |
| *** dviroel has quit IRC | 05:10 | |
| *** jamesmcarthur has quit IRC | 05:36 | |
| *** ykarel has quit IRC | 05:50 | |
| *** ykarel has joined #openstack-infra | 05:53 | |
| *** rcernin has quit IRC | 06:00 | |
| *** ykarel_ has joined #openstack-infra | 06:08 | |
| *** ykarel has quit IRC | 06:10 | |
| *** ykarel_ is now known as ykarel | 06:10 | |
| *** vishalmanchanda has joined #openstack-infra | 06:24 | |
| *** bnemec has quit IRC | 06:43 | |
| *** bnemec has joined #openstack-infra | 06:44 | |
| *** openstackgerrit has joined #openstack-infra | 06:48 | |
| openstackgerrit | Merged openstack/project-config master: Add an nl01.opendev.org config https://review.opendev.org/c/openstack/project-config/+/776979 | 06:48 |
| *** slaweq has joined #openstack-infra | 06:59 | |
| *** redrobot has quit IRC | 07:00 | |
| *** sboyron has joined #openstack-infra | 07:02 | |
| *** ralonsoh has joined #openstack-infra | 07:03 | |
| *** piotrowskim has joined #openstack-infra | 07:09 | |
| *** dhill has quit IRC | 07:25 | |
| *** eolivare has joined #openstack-infra | 07:30 | |
| *** dhill has joined #openstack-infra | 07:34 | |
| *** jamesmcarthur has joined #openstack-infra | 07:36 | |
| *** jamesmcarthur has quit IRC | 07:40 | |
| *** zzzeek has quit IRC | 07:52 | |
| *** zzzeek has joined #openstack-infra | 07:53 | |
| *** lpetrut has joined #openstack-infra | 08:00 | |
| *** dklyle has quit IRC | 08:01 | |
| *** zzzeek has quit IRC | 08:08 | |
| *** zzzeek has joined #openstack-infra | 08:09 | |
| *** rpittau|afk is now known as rpittau | 08:21 | |
| *** gfidente|afk is now known as gfidente | 08:32 | |
| *** zzzeek has quit IRC | 08:40 | |
| *** zzzeek has joined #openstack-infra | 08:41 | |
| *** zzzeek has quit IRC | 08:42 | |
| *** zzzeek has joined #openstack-infra | 08:43 | |
| *** ociuhandu has joined #openstack-infra | 08:44 | |
| *** hashar has joined #openstack-infra | 08:50 | |
| *** jpena|off is now known as jpena | 08:54 | |
| *** lucasagomes has joined #openstack-infra | 09:04 | |
| *** derekh has joined #openstack-infra | 09:14 | |
| *** tosky has joined #openstack-infra | 09:23 | |
| *** gtema has joined #openstack-infra | 09:39 | |
| gtema | can please somebody help with https://zuul.opendev.org/t/openstack/build/df4bccca827f47b99def27c7de789b83 (docs job get SSH key changed) | 09:40 |
| *** dviroel has joined #openstack-infra | 10:18 | |
| *** hashar has quit IRC | 11:03 | |
| *** hashar has joined #openstack-infra | 11:04 | |
| *** ociuhandu has quit IRC | 11:16 | |
| *** ociuhandu has joined #openstack-infra | 11:17 | |
| *** ociuhandu has quit IRC | 11:17 | |
| *** ociuhandu has joined #openstack-infra | 11:18 | |
| *** ykarel_ has joined #openstack-infra | 11:19 | |
| *** ykarel has quit IRC | 11:22 | |
| *** ykarel_ is now known as ykarel | 11:23 | |
| *** lucasagomes has quit IRC | 11:24 | |
| *** lucasagomes has joined #openstack-infra | 11:28 | |
| *** ociuhandu has quit IRC | 11:29 | |
| *** ociuhandu has joined #openstack-infra | 11:31 | |
| *** ociuhandu has quit IRC | 11:54 | |
| *** ociuhandu has joined #openstack-infra | 11:56 | |
| *** ociuhandu has quit IRC | 12:00 | |
| *** dchen has quit IRC | 12:03 | |
| *** ykarel_ has joined #openstack-infra | 12:07 | |
| *** ykarel has quit IRC | 12:09 | |
| *** derekh has quit IRC | 12:13 | |
| *** ysirndjuro has quit IRC | 12:27 | |
| *** rlandy has joined #openstack-infra | 12:33 | |
| *** jpena is now known as jpena|lunch | 12:34 | |
| *** tkajinam has quit IRC | 12:35 | |
| *** tkajinam has joined #openstack-infra | 12:35 | |
| *** gtema has quit IRC | 12:37 | |
| *** hashar is now known as hasharLunch | 12:39 | |
| *** xek has joined #openstack-infra | 13:01 | |
| *** redrobot has joined #openstack-infra | 13:06 | |
| *** ociuhandu has joined #openstack-infra | 13:06 | |
| *** hasharLunch is now known as hashar | 13:14 | |
| *** jamesdenton has quit IRC | 13:18 | |
| *** jamesden_ has joined #openstack-infra | 13:18 | |
| *** ociuhandu has quit IRC | 13:26 | |
| *** ociuhandu has joined #openstack-infra | 13:26 | |
| *** jpena|lunch is now known as jpena | 13:28 | |
| *** ociuhandu has quit IRC | 13:31 | |
| *** nweinber has joined #openstack-infra | 13:38 | |
| *** amoralej is now known as amoralej|lunch | 13:47 | |
| *** ociuhandu has joined #openstack-infra | 14:16 | |
| *** amoralej|lunch is now known as amoralej | 14:24 | |
| *** ykarel_ is now known as ykarel | 14:32 | |
| *** ociuhandu has quit IRC | 14:33 | |
| *** ociuhandu has joined #openstack-infra | 14:39 | |
| *** jamesden_ is now known as jamesdenton | 15:03 | |
| *** lpetrut has quit IRC | 15:03 | |
| *** rpittau is now known as rpittau|afk | 15:03 | |
| *** ociuhandu has quit IRC | 15:29 | |
| *** ociuhandu has joined #openstack-infra | 15:33 | |
| *** ociuhandu has quit IRC | 15:36 | |
| *** ociuhandu has joined #openstack-infra | 15:36 | |
| *** przemeklal has joined #openstack-infra | 15:37 | |
| *** ykarel has quit IRC | 15:37 | |
| *** dklyle has joined #openstack-infra | 15:43 | |
| *** psachin has quit IRC | 16:17 | |
| *** hashar is now known as hasharAway | 16:27 | |
| *** ociuhandu has quit IRC | 16:29 | |
| *** ociuhandu has joined #openstack-infra | 16:32 | |
| *** ociuhandu has quit IRC | 16:36 | |
| *** ociuhandu has joined #openstack-infra | 16:42 | |
| *** lucasagomes has quit IRC | 16:59 | |
| *** przemeklal has quit IRC | 17:04 | |
| *** eolivare has quit IRC | 17:15 | |
| *** amoralej is now known as amoralej|off | 17:39 | |
| *** ociuhandu_ has joined #openstack-infra | 17:39 | |
| *** ociuhandu_ has quit IRC | 17:40 | |
| *** ociuhandu has quit IRC | 17:40 | |
| *** ociuhandu has joined #openstack-infra | 17:41 | |
| *** dklyle has quit IRC | 17:52 | |
| *** dklyle has joined #openstack-infra | 17:52 | |
| *** jamesmcarthur has joined #openstack-infra | 17:53 | |
| *** jpena is now known as jpena|off | 17:58 | |
| *** gfidente has quit IRC | 17:59 | |
| *** irclogbot_0 has quit IRC | 18:03 | |
| *** irclogbot_2 has joined #openstack-infra | 18:04 | |
| *** gyee has joined #openstack-infra | 18:17 | |
| *** irclogbot_2 has quit IRC | 18:24 | |
| *** hasharAway has quit IRC | 18:27 | |
| *** irclogbot_2 has joined #openstack-infra | 18:28 | |
| *** jamesmcarthur_ has joined #openstack-infra | 18:34 | |
| *** ralonsoh has quit IRC | 18:35 | |
| *** jamesmcarthur has quit IRC | 18:38 | |
| *** ociuhandu has quit IRC | 18:42 | |
| *** ociuhandu has joined #openstack-infra | 18:54 | |
| *** ociuhandu has quit IRC | 18:58 | |
| *** xek has quit IRC | 19:04 | |
| *** elod has quit IRC | 19:12 | |
| *** takamatsu has quit IRC | 19:13 | |
| *** elod has joined #openstack-infra | 19:13 | |
| *** takamatsu has joined #openstack-infra | 19:27 | |
| *** outbrito has quit IRC | 19:28 | |
| *** sboyron has quit IRC | 19:30 | |
| *** jamesmcarthur_ has quit IRC | 19:52 | |
| *** jamesmcarthur has joined #openstack-infra | 19:53 | |
| *** jamesmcarthur has quit IRC | 19:58 | |
| *** przemeklal has joined #openstack-infra | 20:03 | |
| *** slaweq has quit IRC | 20:17 | |
| *** przemeklal has quit IRC | 20:30 | |
| *** dciabrin_ has joined #openstack-infra | 20:48 | |
| *** jamesdenton has quit IRC | 20:49 | |
| *** jamesden_ has joined #openstack-infra | 20:49 | |
| *** dciabrin has quit IRC | 20:51 | |
| *** nweinber has quit IRC | 21:13 | |
| *** hamalq has joined #openstack-infra | 21:14 | |
| *** ajitha has quit IRC | 21:18 | |
| *** rlandy has quit IRC | 22:19 | |
| *** iurygregory has quit IRC | 22:57 | |
| *** dchen has joined #openstack-infra | 23:05 | |
| *** iurygregory has joined #openstack-infra | 23:22 | |
| *** elod has quit IRC | 23:25 | |
| *** hamalq has quit IRC | 23:44 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!