From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qv1-xf2d.google.com (mail-qv1-xf2d.google.com [IPv6:2607:f8b0:4864:20::f2d]) by sourceware.org (Postfix) with ESMTPS id 1256D386F012 for ; Mon, 1 Jun 2020 19:14:29 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 1256D386F012 Received: by mail-qv1-xf2d.google.com with SMTP id fc4so588695qvb.1 for ; Mon, 01 Jun 2020 12:14:29 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=4AhEyaiyO2WWN7Qm5pUquYlex9jY62ziy1JPPCwsuCI=; b=a9J+SiuKWhYW26msHTiXcEGt/If6sF6bgscbrLwhitHWt5N4qcEA3LiScJ5nuDNFTi KHUTxac8F0bZPEveO9ZLa+rtB3Vymogfl6UJFNASr/YGutvFLv+Vp7tC7KUXyLlQb2ku RoEMhcRzDsv8SOV4nLDh2/ZQs5xehAvX/5pyGMhC+iX60ythTaNAdy2TwLmglWVFi40T m7k1mRuf5l40n3RROaG1KGe/07K7OyxY0UAhTpymi43jEA/fmFS5b+7qKR+sXHMnLOxM aZCZlKLrLO/bPihSqhFLaaJmUCboaMDpLNr0p0LaNsuKF0P3mkP1T0yk2I8HfZ1rbRY2 5CwQ== X-Gm-Message-State: AOAM531NCc2UV4wgE8dsujHyQ3D3aCfNpTw6UBdx590svlgiXQv70xCd kE61rVzhWEZRZda/PdbCbAmVIayf X-Google-Smtp-Source: ABdhPJwTaLLqLfCbgEqacdgNgr64vOXq+PhjIC0w86P1aCnFSp1GowPzI1FPZtMg5EmCqNyZ8LM5AQ== X-Received: by 2002:a05:6214:1342:: with SMTP id b2mr22169063qvw.80.1591038868585; Mon, 01 Jun 2020 12:14:28 -0700 (PDT) Received: from [192.168.0.41] (75-166-103-121.hlrn.qwest.net. [75.166.103.121]) by smtp.gmail.com with ESMTPSA id o144sm102251qke.126.2020.06.01.12.14.27 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 01 Jun 2020 12:14:27 -0700 (PDT) Subject: Re: sign_and_send_pubkey: signing failed: agent refused operation To: "Frank Ch. Eigler" , Overseers mailing list Cc: gcc mailing list References: <20200601181037.GB16575@redhat.com> From: Martin Sebor Message-ID: <74ac89cb-31b7-770b-0e2a-c1256db64db1@gmail.com> Date: Mon, 1 Jun 2020 13:14:26 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <20200601181037.GB16575@redhat.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-3.2 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: overseers@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Overseers mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2020 19:14:30 -0000 On 6/1/20 12:10 PM, Frank Ch. Eigler wrote: > Hi - > >> git pull from the GCC and Glibc repos is failing for me with the error >> below. It worked fine last week and I haven't made any changes to my >> ssh keys. > > And are you logging in from the same workstation with access to the same > set of ssh private keys? Yes. > >> Is this a transient glitch or has something changed recently that I >> need to make some adjustments for? > > I know of nothing relevant that has changed on the sourceware side. > >> sign_and_send_pubkey: signing failed: agent refused operation >> msebor@gcc.gnu.org: Permission denied (publickey). >> fatal: Could not read from remote repository. > > The usual advice is to run % ssh -vv gcc.gnu.org alive > and report the ssh level error. > > "agent refused operation" sounds like a problem on the client end. Until last week, when I ran git pull from the GCC or Glibc repo I'd get prompted for my password. I'd either type it in or hit ctrl-C, enter ssh-add, and start over. After deleting ~/.ssh/known_hosts to resolve the problem I asked about last week (Re: ssh key conflicts), I'm no longer prompted for my password. Instead, I get the error above. Both of this is new (I think since the recent server changes). Now that I've seen it and know what to expect I can adjust to it but it seems like things have gotten worse. Certainly the errors I got in both instances (i.e., last week as well as today) are not helpful. I captured the ssh -vv gcc.gnu.org output below for a successful invocation and a failed one if that sheds more light on why it's failing in (to me) a mysterious way. Successful authentication: debug1: Will attempt key: /home/msebor/.ssh/id_rsa RSA SHA256:law7uJ+wmAP4krZHnB0tLJ8M+ySmMCclh7mRB9Dlja4 agent debug1: Will attempt key: /home/msebor/.ssh/id_ecdsa debug1: Will attempt key: /home/msebor/.ssh/id_ed25519 debug1: Will attempt key: /home/msebor/.ssh/id_xmss debug2: pubkey_prepare: done debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs= debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering public key: /home/msebor/.ssh/id_rsa RSA SHA256:law7uJ+wmAP4krZHnB0tLJ8M+ySmMCclh7mRB9Dlja4 agent debug2: we sent a publickey packet, wait for reply debug1: Server accepts key: /home/msebor/.ssh/id_rsa RSA SHA256:law7uJ+wmAP4krZHnB0tLJ8M+ySmMCclh7mRB9Dlja4 agent debug1: Authentication succeeded (publickey). Authenticated to gcc.gnu.org ([8.43.85.97]:22). Failed authentication (after ssh-add -D): debug1: Will attempt key: /home/msebor/.ssh/id_rsa RSA SHA256:law7uJ+wmAP4krZHnB0tLJ8M+ySmMCclh7mRB9Dlja4 agent debug1: Will attempt key: /home/msebor/.ssh/id_ecdsa debug1: Will attempt key: /home/msebor/.ssh/id_ed25519 debug1: Will attempt key: /home/msebor/.ssh/id_xmss debug2: pubkey_prepare: done debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs= debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Offering public key: /home/msebor/.ssh/id_rsa RSA SHA256:law7uJ+wmAP4krZHnB0tLJ8M+ySmMCclh7mRB9Dlja4 agent debug2: we sent a publickey packet, wait for reply debug1: Server accepts key: /home/msebor/.ssh/id_rsa RSA SHA256:law7uJ+wmAP4krZHnB0tLJ8M+ySmMCclh7mRB9Dlja4 agent sign_and_send_pubkey: signing failed: agent refused operation debug1: Trying private key: /home/msebor/.ssh/id_ecdsa debug1: Trying private key: /home/msebor/.ssh/id_ed25519 debug1: Trying private key: /home/msebor/.ssh/id_xmss debug2: we did not send a packet, disable method debug1: No more authentication methods to try. msebor@gcc.gnu.org: Permission denied (publickey). Martin