From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io1-xd43.google.com (mail-io1-xd43.google.com [IPv6:2607:f8b0:4864:20::d43]) by sourceware.org (Postfix) with ESMTPS id 970323851C37 for ; Mon, 1 Jun 2020 22:30:27 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 970323851C37 Received: by mail-io1-xd43.google.com with SMTP id h4so5449194iob.10 for ; Mon, 01 Jun 2020 15:30:27 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=XyXEUlFfZlX3lXXa0l07aEbnZ39TxvrCUeEghRMBoJ0=; b=Q6yZEk227DF8mcqfk5cjbsef2/QWE+vB4iw7THcbXkBzNNpenUaABVpqcWRaw/2lnL qgrgfrFSTve92nQDWOQca2dOf3OltnVbpK/oQkD57WXiN79rKMTMSGvw5w1JFdTYSW+K gM02xecDOY+oP+NhecTdGUO0cQnlp5KPm0wC41zoCdhsUJqF0XCnXCFAjeScvJ85vbMm W1+u5tF2EbbjAZtachWF/dox5yNUsUNQWm3LZlua6dnvd0W3Qn1DGGALXkd/M+rsUnjV e0Z3VVr9dYh0wrJfAax2X1xduhdyna5Z4FKgdfths2eosz0QpjyBfuGBEDeTmV2HllOS cnVQ== X-Gm-Message-State: AOAM533fsP7rOk6xmZvEBC28pMD0hpWNvIfuyJhKTTw/X41HnXzGFAOQ qt2L2a3A9OmIZTGZLRiO94uobWj4cX8yR5ntIUE= X-Google-Smtp-Source: ABdhPJwSPnhMwS19As+kPRHsdyWg/pebmNGMM9CJ9Im3lPMJOD2OUxgKjyHDt/MIvZpIpolylyMPzMdLZUXi2jqTZ+Q= X-Received: by 2002:a6b:3e86:: with SMTP id l128mr19841968ioa.95.1591050627131; Mon, 01 Jun 2020 15:30:27 -0700 (PDT) MIME-Version: 1.0 References: <20200601181037.GB16575@redhat.com> <74ac89cb-31b7-770b-0e2a-c1256db64db1@gmail.com> In-Reply-To: From: Jonathan Wakely Date: Mon, 1 Jun 2020 23:30:15 +0100 Message-ID: Subject: Re: sign_and_send_pubkey: signing failed: agent refused operation To: Martin Sebor Cc: "Frank Ch. Eigler" , Overseers mailing list , gcc mailing list Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: overseers@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Overseers mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2020 22:30:28 -0000 On Mon, 1 Jun 2020 at 20:46, Martin Sebor wrote: > > On 6/1/20 1:25 PM, Jonathan Wakely wrote: > > On Mon, 1 Jun 2020 at 20:16, Martin Sebor via Gcc wrote: > >> > >> On 6/1/20 12:10 PM, Frank Ch. Eigler wrote: > >>> Hi - > >>> > >>>> git pull from the GCC and Glibc repos is failing for me with the error > >>>> below. It worked fine last week and I haven't made any changes to my > >>>> ssh keys. > >>> > >>> And are you logging in from the same workstation with access to the same > >>> set of ssh private keys? > >> > >> Yes. > >> > >>> > >>>> Is this a transient glitch or has something changed recently that I > >>>> need to make some adjustments for? > >>> > >>> I know of nothing relevant that has changed on the sourceware side. > >>> > >>>> sign_and_send_pubkey: signing failed: agent refused operation > >>>> msebor@gcc.gnu.org: Permission denied (publickey). > >>>> fatal: Could not read from remote repository. > >>> > >>> The usual advice is to run % ssh -vv gcc.gnu.org alive > >>> and report the ssh level error. > >>> > >>> "agent refused operation" sounds like a problem on the client end. > >> > >> Until last week, when I ran git pull from the GCC or Glibc repo > >> I'd get prompted for my password. I'd either type it in or hit > >> ctrl-C, enter ssh-add, and start over. > >> > >> After deleting ~/.ssh/known_hosts to resolve the problem I asked > >> about last week (Re: ssh key conflicts), I'm no longer prompted > >> for my password. Instead, I get the error above. > > > > Is ~/.ssh/known_hosts no longer present? Is ~/.ssh writable by your > > user? The ssh client (or the agent) will try to create > > ~/.ssh/known_hosts if it doesn't exist, to add the host key. If ~/.ssh > > is not writable that will fail. > > ~/.ssh/known_hosts exists and ~/.ssh is rwx only by the owner. > Everything works fine if I add my key by running ssh-add. What's > not so great is the errors I get when I forget to do that: "agent > refused operation?" Is $SSH_ASKPASS set in your environment? Does running the command it's set to work? Are you using the openssh agent, or something else like gpg-agent or GNOME keyring? It's not a server-side error though. The server can't prevent your agent from prompting you for your key's passphrase.