ssh asking for passphrase when I didn't set one

garyozzy · 12-12-2011, 11:50 AM

I set up a git user on my server according to this guide,

http://scie.nti.st/2007/11/14/hostin...and-secure-way

It's all good until I try to clone the git repository I made.

Code:

$ git clone git@HOSTNAME:gitosis-admin.git
Cloning into 'gitosis-admin'...
Enter passphrase for key: 
Permission denied (publickey). 
fatal: The remote end hung up unexpectedly

It asks for a passphrase, but when I made the key (using PuTTYGen) I didn't put one in there.

When I try to ssh (not using git),

Code:

$ ssh git@HOSTNAME
Enter passphrase for key: 
Permission denied (publickey).

Obviously, in both examples I've put my own hostname in. Other users can ssh in just fine.

Any ideas?

klearview · 12-12-2011, 12:36 PM

I've got a few ideas for you

a) Gitosis is abandoned - use gitolite instead
b) check your /etc/passwd - gitosis from repos on Ubuntu, for example, is under user 'gitosis', not 'git', so it will be ssh gitosis@HOSTNAME
c) ssh git@HOSTNAME - that won't work in any case as Gitosis prevents direct shell login to 'gitosis' user.

Reuti · 12-13-2011, 04:00 AM

What is the output of:

Code:

$ ssh-keygen -y

This will recreate the public part out of the private part (e.g. in case you lost the public part). If there is a passphrase, it will ask. Otherwise not.

garyozzy · 12-13-2011, 03:20 PM

Quote:

Originally Posted by klearview

I've got a few ideas for you

a) Gitosis is abandoned - use gitolite instead

Thank you. I did not know that and am switching to gitolite.

Quote:

Originally Posted by klearview

b) check your /etc/passwd - gitosis from repos on Ubuntu, for example, is under user 'gitosis', not 'git', so it will be ssh gitosis@HOSTNAME

I installed it from source, but thank you, good to know.

Quote:

c) ssh git@HOSTNAME - that won't work in any case as Gitosis prevents direct shell login to 'gitosis' user.

Also good to know.

Quote:

Originally Posted by Reuti

What is the output of:

Code:

$ ssh-keygen -y

It appears this is the problem...ssh-keygen doesn't like my private key. After making a new keypair (with ssh-keygen instead of PuTTY), everything seems to be working.

Thank you for all your help!

Reuti · 12-13-2011, 03:24 PM

Just to elaborate: PuTTY has its own format of a private key. You can convert this format in puttygen itself into the openssh format (besides the commercial format). There is a menu entry for it.

garyozzy · 12-13-2011, 03:26 PM

Quote:

Originally Posted by Reuti

Just to elaborate: PuTTY has its own format of a private key. You can convert this format in puttygen itself into the openssh format (besides the commercial format). There is a menu entry for it.

I had done this (export OpenSSH key I think the option's called?) but I probably messed it up somehow moving everything around.