Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 312034

Summary:	Committers ssh access to git repositories
Product:	Community	Reporter:	Steve Powell <zteve.powell>
Component:	Git	Assignee:	Eclipse Webmaster <webmaster>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	P3	CC:	angvoz.dev, eclipse.sprigogin, glyn.normington, jamesblackburn+eclipse, john.cortell
Version:	unspecified
Target Milestone:	---
Hardware:	PC
OS:	Mac OS X - Carbon (unsup.)
Whiteboard:

Description Steve Powell

2010-05-07 06:16:14 EDT

Currently committers to a project can push to git repositories for that project (using ssh:// git addresses)
but that requires that we enter our password every time we push or pull from the remote git repository.

An attempt to prevent this was posted on the Git Wiki page which works only for project leads -- to put the committer's public ssh key in ~/.ssh/authorized_keys on the git eclipse host.

However, committers can't do this (I can get the file there, but not in the right place, nor can I create an authorized_keys file in a new directory called .ssh under ~).

Please can you provide a mechanism so that committers can use remote git repositories less painfully?  Preferably by allowing ssh authentication by use of the public key as described on http://wiki.eclipse.org/git under 'setting up ssh keys'.

Comment 1 Denis Roy

2010-05-07 13:32:24 EDT

I have given you a real shell so that you can set up your keys.  Let me know here when you're done, please.

Thanks

Comment 2 Steve Powell

2010-05-10 12:52:24 EDT

(In reply to comment #1)
> I have given you a real shell so that you can set up your keys.  Let me know
> here when you're done, please.
> 
> Thanks

Denis,

Thank you - I have set up ssh keys for myself. However, this is only a point fix, and doesn't help the other committers on our project.  I guess this is going to be a general problem.

Comment 3 Denis Roy

2010-05-10 13:06:17 EDT

> I guess this is
> going to be a general problem.

Unless you have something in mind, those folks can either open a bug requesting a shell to upload their keys, or the project lead can contact me at webmaster@eclipse.org with the list of committers who want to install keys.

For security purposes, we disable shell accounts on our servers.

Comment 4 Glyn Normington

2010-05-11 04:13:43 EDT

(In reply to comment #3)
> > I guess this is
> > going to be a general problem.
> 
> Unless you have something in mind, those folks can either open a bug requesting
> a shell to upload their keys, or the project lead can contact me at
> webmaster@eclipse.org with the list of committers who want to install keys.
> 
> For security purposes, we disable shell accounts on our servers.

I raised https://bugs.eclipse.org/bugs/show_bug.cgi?id=312378 as an alternative in the longer term.

Comment 5 Steve Powell

2010-08-06 04:17:53 EDT

Done

Comment 6 Steve Powell

2010-12-03 07:17:16 EST

I need to add another set of ssh keys (new laptop!).  Can you give me a full shell temporarily, please?

Comment 7 Steve Powell

2010-12-03 07:18:12 EST

Changed to bug so you see it.

Comment 8 Denis Roy

2010-12-03 13:32:47 EST

Steve, you have a shell now.  Feel free to upload your key.  It could take a few minutes for the user accounts caches to clear.

Comment 9 Steve Powell

2010-12-06 09:07:05 EST

Thanks Denis. Key uploaded. (A bit of fiddling around made it work. It turns out Apple Migrate copied the old keys from my macbook, so nearly everything worked, but git complained I wasn't who I said I was葉he machine full name had changed.)

No longer need the shell, ta.

Comment 10 Sergey Prigogin

2011-06-23 23:21:33 EDT

Could you please give me normal shell to upload public keys. Thanks.

Comment 11 Andrew Gvozdev

2011-06-24 01:30:10 EDT

(In reply to comment #10)
> Could you please give me normal shell to upload public keys. Thanks.
Me too, please.

Comment 12 Eclipse Webmaster

2011-06-24 09:36:41 EDT

Ok I've granted both of you shells for the next 24h to upload your keys.

-M.

Comment 13 John Cortell

2011-06-24 11:27:53 EDT

Me too, please.

Comment 14 Eclipse Webmaster

2011-06-24 13:45:41 EDT

Done.

-M.

Comment 15 James Blackburn

2011-06-24 15:28:25 EDT

I have bug 349348 for egit prompting 3 times for every action which talks to eclipse.org...

Comment 16 Sergey Prigogin

2011-06-25 01:20:02 EDT

(In reply to comment #14)
Thanks a lot.

Comment 17 Andrew Gvozdev

2011-06-25 08:01:17 EDT

(In reply to comment #16)
> (In reply to comment #14)
> Thanks a lot.
Yes, me too. Very mach appreciated, Matt.

Comment 18 Eclipse Webmaster

2011-06-27 10:06:43 EDT

Ok, all of your shells have been reset.

-M.

Comment 19 Denis Roy

2012-03-23 09:26:13 EDT

I'll assume all is well here.