replication error Caused by: com.jcraft.jsch.JSchException: Auth cancel

[bomjose]

i am trying to set up replication to remote server as per
documentation but getting failure in ssh handshake.

I have on gerrit server/.ssh/known_host file with ssh key from the
destination server. and i have ran following command
gerrit2@prawal:~$ sudo su -c 'ssh user...@105.xx.xx.xx echo' gerrit2

This returns me back with RSA key add to knownhost and after saying
yes it is asking me for the password for Username. After entering
passoword it exits. Seems everything fine.

Here is my gerrit.config file.

[remote "host"]
url = ssh://pa...@10x.xx.xx.xx:/tmp/repository_from/${name}.git
push = +refs/heads/*:refs/heads/*
push = +refs/tags/*:refs/tags/*
timeout = 3
replicationDelay = 5
authGroup = Administrators

I restarted Gerrit to reload this config file and now i am seeing
error for authentication as below.

[2011-10-31 15:48:13,298] ERROR
com.google.gerrit.server.git.PushReplication : Cannot replicate to
ger...@105.68.13.84:/tmp/repository_from_29/ics/platform/packages/
apps/Settings.git
org.eclipse.jgit.errors.TransportException: ger...@105.xx.xx.xx:/tmp/
repository_from/ics/platform/packages/apps/Settings.git: Auth cancel

Caused by: com.jcraft.jsch.JSchException: Auth cancel

How can i overcome this error of SSH. Should i set up a password
somewhere for authentication?

[Magnus Bäck]

On Tuesday, November 01, 2011 at 01:35 CET,
bomjose <pra...@sta.samsung.com> wrote:

> i am trying to set up replication to remote server as per
> documentation but getting failure in ssh handshake.
>
> I have on gerrit server/.ssh/known_host file with ssh key from the
> destination server. and i have ran following command
> gerrit2@prawal:~$ sudo su -c 'ssh user...@105.xx.xx.xx echo' gerrit2

(You already are the gerrit2 user, so there's no point in su'ing.)

> This returns me back with RSA key add to knownhost and after saying
> yes it is asking me for the password for Username. After entering
> passoword it exits. Seems everything fine.

No, it shouldn't be asking you for a password. Did you add the private
SSH key of the gerrit2 user at the prawal host to the authorized_keys
file of the gerrit2 user on the destination server?

Until you can logon without a password from gerrit2@prawal there's no
point in trying to get Gerrit to do the replication.

[...]

--
Magnus Bäck Opinions are my own and do not necessarily
SW Configuration Manager represent the ones of my employer, etc.
Sony Ericsson

[bomjose]

Thank you Magnus. I have fixed SSH connection and now it allows me to
connect without password. Restarted Gerrit; But now i am getting
connection failed error while replicating. At command prompt i can
connect to this machine without password.

[2011-11-01 12:33:55,039] ERROR
com.google.gerrit.server.git.PushReplication : Cannot replicate to
ger...@105.xxxxxx:/tmp/repository_from/ics/platform/external/mtpd.git
org.eclipse.jgit.errors.TransportException: ger...@105.xxxx:/tmp/
repository_from/platform/external/mtpd.git: connection failed


I did 'ssh -v ger...@105.68.13.84 echo' gerrit2 and it shows no
error.

gerrit2@prawal:~/review_site$ sudo su -c 'ssh -v ger...@105.xxxx
echo' gerrit2
OpenSSH_5.3p1 Debian-3ubuntu6, OpenSSL 0.9.8k 25 Mar 2009
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 105.68.13.84 [105.xxxxx] port 22.
debug1: Connection established.
debug1: identity file /home/gerrit2/.ssh/identity type -1
debug1: identity file /home/gerrit2/.ssh/id_rsa type 1
debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
debug1: identity file /home/gerrit2/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version
OpenSSH_5.3p1 Debian-3ubuntu6
debug1: match: OpenSSH_5.3p1 Debian-3ubuntu6 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu6
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '105.68.13.84' is known and matches the RSA host key.
debug1: Found key in /home/gerrit2/.ssh/known_hosts:4
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Trying private key: /home/gerrit2/.ssh/identity
debug1: Offering public key: /home/gerrit2/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Requesting no-more-...@openssh.com
debug1: Entering interactive session.
debug1: Sending environment.
debug1: Sending env LANG = en_US.UTF-8
debug1: Sending command: echo

debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: client_input_channel_req: channel 0 rtype e...@openssh.com
reply 0
debug1: channel 0: free: client-session, nchannels 1
Transferred: sent 2272, received 2296 bytes, in 0.1 seconds
Bytes per second: sent 21149.0, received 21372.4
debug1: Exit status 0

On Oct 31, 9:57 pm, Magnus Bäck <magnus.b...@sonyericsson.com> wrote:
> On Tuesday, November 01, 2011 at 01:35 CET,
>      bomjose <pra...@sta.samsung.com> wrote:
>
> > i am trying to set up replication to remote server as per
> > documentation but getting failure in ssh handshake.
>
> > I have on gerrit server/.ssh/known_host file with ssh key from the
> > destination server. and i have ran following command

> > gerrit2@prawal:~$ sudo su -c 'ssh usern...@105.xx.xx.xx echo' gerrit2