# gitosis asking for password

3 messages from 2011-05-31 to 2011-06-01. Participants: Tim Guirgies, Matthieu Moy.
Thread: https://gitlist.dev/t/27509

## Tim Guirgies, 2011-05-31 15:49

Subject: gitosis asking for password
Message-ID: <20110531154954.GB4483@Imperial-SSD-Overlord>
URL: https://gitlist.dev/e/20110531154954.GB4483%40Imperial-SSD-Overlord

```
Hi List,

I've been at this for a few days now, to no avail.  It all began when
gitosis stopped liking me, and whenever I tried to fetch from or push to
my gitosis server, it gave me a 'fatal: x does not appear to be a git
repo' error.

So, I decided to remove gitosis and start again afresh.  Following this
[1] guide, I did/got the following:


$ sudo adduser --system --shell /bin/sh --gecos 'git version control'
--group --disabled-password --home /home/gitosis gitosis
Adding system user `gitosis' (UID 119) ...
Adding new group `gitosis' (GID 128) ...
Adding new user `gitosis' (UID 119) with group `gitosis' ...
Creating home directory `/home/gitosis' ...

$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/tim/.ssh/id_rsa): 
Created directory '/home/tim/.ssh'.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /home/tim/.ssh/id_rsa.
Your public key has been saved in /home/tim/.ssh/id_rsa.pub.
...

$ sudo -H -u gitosis gitosis-init < /home/tim/.ssh/id_rsa.pub 
Initialized empty Git repository in
/home/gitosis/repositories/gitosis-admin.git/
Reinitialized existing Git repository in
/home/gitosis/repositories/gitosis-admin.git/

$ git clone gitosis@overlord.imperial.fleet:gitosis-admin
Cloning into gitosis-admin...
gitosis@overlord.imperial.fleet's password: 
Permission denied, please try again.


Of course, it's not meant to ask me for a password, and no matter what I
type, it won't work anyway, as it's disabled.

So, did I miss something?  Does anybody know some gitosis magic?


Tim


[1] http://scie.nti.st/2007/11/14/hosting-git-repositories-the-easy-and-secure-way

-- 
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org   - against proprietary attachments

```

## Matthieu Moy, 2011-05-31 16:01

Subject: Re: gitosis asking for password
Message-ID: <vpqy61mrha6.fsf@bauges.imag.fr>
URL: https://gitlist.dev/e/vpqy61mrha6.fsf%40bauges.imag.fr
In-Reply-To: <20110531154954.GB4483@Imperial-SSD-Overlord>

```
Tim Guirgies <lt.infiltrator@gmail.com> writes:

> So, I decided to remove gitosis and start again afresh.  Following this
> [1] guide, I did/got the following:

Gitosis is no longer maintained. You should probably be trying gitolite
instead.

> $ git clone gitosis@overlord.imperial.fleet:gitosis-admin
> Cloning into gitosis-admin...
> gitosis@overlord.imperial.fleet's password: 
> Permission denied, please try again.

If it asks for password, then it's probably a plain SSH problem. Try
reproducing it with e.g.

ssh gitosis@overlord.imperial.fleet

or

ssh -vvv gitosis@overlord.imperial.fleet

to see what's going on. Look at ~/.ssh/authorized_keys on the server.

-- 
Matthieu Moy
http://www-verimag.imag.fr/~moy/

```

## Tim Guirgies, 2011-06-01 02:23

Subject: Re: gitosis asking for password
Message-ID: <20110601022313.GA3025@Imperial-SD-Longsword>
URL: https://gitlist.dev/e/20110601022313.GA3025%40Imperial-SD-Longsword
In-Reply-To: <vpqy61mrha6.fsf@bauges.imag.fr>

```
On Tue, May 31, 2011 at 06:01:05PM +0200, Matthieu Moy wrote:
> Gitosis is no longer maintained. You should probably be trying gitolite
> instead.

Ah; well, I guess now's as good a time as any to migrate to gitolite
then.  I set up gitosis a few years ago and it hadn't been giving me any
problems.


> If it asks for password, then it's probably a plain SSH problem. Try
> reproducing it with e.g.
...
> ssh -vvv gitosis@overlord.imperial.fleet

I did this just to see, and this is quite interesting:

debug3: Not a RSA1 key file /home/tim/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'Proc-Type:'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'DEK-Info:'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace   (x~20)
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/tim/.ssh/id_rsa type 1
...
debug2: key: /home/tim/.ssh/id_rsa (0x7f7c8f0f7020)
debug2: key: /home/tim/.ssh/id_dsa ((nil))
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred
gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/tim/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /home/tim/.ssh/id_dsa
debug3: no such identity: /home/tim/.ssh/id_dsa
debug2: we did not send a packet, disable method
...

That is very odd, as I didn't change anything after ssh-keygen and
gitosis-init.  I suppose it's irrelevant anyway, as I'll be switching to
gitolite.

Thanks for the advice, and sorry about the noise.


Tim

-- 
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org   - against proprietary attachments

```
