通过ssh隧道连接到Gitosi服务器

我的MacBook上有一个ssh隧道设置,就像这样…

$ ssh -o ServerAliveInterval=3 -N -L 22222:gitosis-server:22 user@firewall.domain.com

所以我可以ssh到localhost:2222,并最终在防火墙后面的Gitosi服务器上完成。

我创建了一个本地id_rsa.pub文件,将其复制到Gitosi服务器(运行centos5),并使用…

# sudo -H -u gitosis gitosis-init 

It was successful as I can see the public key in /var/lib/gitosis/.ssh/authorized_keys.



Back on my macbook I setup a ~/.ssh/config file with the following...

Host gitosis-server
Hostname localhost
HostKeyAlias gitosis-server.domain.com
  Port 22222


So...I'm thinking this command should work...

$ git clone gitosis@gitosis-server:gitosis-admin.git

It does not however as it comes up asking for a password....when the public keys should be working.

Initialized empty Git repository in /Users/USER/Development/gitrepo/gitosis-admin/.git/
gitosis@localhost's password: 


Any ideas on getting git working through to a gitosis server behind a firewall?

Thanks,

Matt



EDIT - Adding Debug From SSH Attempt

I did this command, 'ssh -vvv gitosis@gitosis-server'.  I get some debugging back and it doesn't seem to like my Identity.

debug2: key: /Users/USER/.ssh/id_rsa.gitosis (0x1019b0)
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug3: start over, passed a different list publickey,gssapi-with-mic,password
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /Users/USER/.ssh/id_rsa.gitosis
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
gitosis@localhost's password: 



EDIT 2

OK...Definately a bad key.  I double checked all my keys again and of course found the gitosis-server was holding a bad key in the authorized_keys file.


debug1: userauth-request for user gitosis service ssh-connection method none
debug1: attempt 0 failures 0
debug1: PAM: initializing for "gitosis"
debug1: PAM: setting PAM_RHOST to "firewall.domain.com"
debug1: PAM: setting PAM_TTY to "ssh"
debug1: userauth-request for user gitosis service ssh-connection method publickey
debug1: attempt 1 failures 1
debug1: test whether pkalg/pkblob are acceptable
debug1: temporarily_use_uid: 102/103 (e=0/0)
debug1: trying public key file /var/lib/gitosis/.ssh/authorized_keys
debug1: restore_uid: 0/0
debug1: temporarily_use_uid: 102/103 (e=0/0)
debug1: trying public key file /var/lib/gitosis/.ssh/authorized_keys2
debug1: restore_uid: 0/0
Failed publickey for gitosis from FIRE.WALL.IP.ADDRESS port 52453 ssh2

我仔细看了一下Gitosis服务器上的授权密钥文件……这是不正确的。我仔细检查了我从工作站复制到/tmp的公钥文件,它是正确的,但与授权的_密钥不同。我删除了服务器上的授权密钥文件,并重新运行“sudo-h-u gitosis gitosis init</tmp/id_rsa.gitosis.pub”。再次检查授权的_密钥文件…..但它仍然是错误的。

我通过编辑授权的_键并添加正确的键手动更新了它,然后我让它从我的工作站通过通道工作了一两次。然后它像以前一样停止工作了。我回到Gitosi服务器上授权的_密钥文件中,果然……Gitosi已将其恢复为不起作用的旧密钥。

为什么它会这样做……恢复到一个坏的公钥……即使在我尝试用上面的命令添加它之后……它未能更改它……然后手动更改它……这很有效,但是Git随后又恢复到坏的公钥。

就像Gitosis一直记得我放在里面的第一把钥匙……不让我把它改成正确的钥匙。

令人沮丧的。。。

马特