[Cryptech Tech] Some poblems with the repo access

[Joachim Strömbergson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

I (and Linus) are trying to pipe clean the repo access. I stumble upon a
few issues.

I can clone the testing repo with:

<quote>
#> git clone git at cryptech.is:testing.git
</quote>

But when I try to push a commit back to origin I get permission problems:

<quote>
#> git push
FATAL: W any testing joachim at secworks.se DENIED by fallthru
(or you mis-spelled the reponame)
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
</quote>

And if we check the status for the repo it shows that I only have 'R'
access:

<quote>
hello joachim at secworks.se, this is git at cryptech running gitolite3
v3.5.2-0-g926bd5f on git 1.8.5.2

 R   C	[a-zA-Z0-9].*
 R  	gitolite-admin
 R  	testing
<quote>

Also, I've tried to create repos, but this also seems not to work (as I
thought it should work:

<quote>
ssh git at cryptech.is create test2
Initialized empty Git repository in /usr/local/git/repositories/test2.git/
'batch' mode started, waiting for input (run with '-h' for details).
Please hit Ctrl-C if you did not intend to do this.

IntegrityError: UNIQUE constraint failed: repository.id, repository.name
</quote>

Testing with another name:
<quote>
ssh git at cryptech.is create verydifferentreponame
Initialized empty Git repository in
/usr/local/git/repositories/verydifferentreponame.git/
'batch' mode started, waiting for input (run with '-h' for details).
Please hit Ctrl-C if you did not intend to do this.

IntegrityError: UNIQUE constraint failed: repository.id, repository.name
</quote>

Google does not find an obvious solution for Gitolite.

But the repos seems to be created anyway, so now we do have the repos
test2 and verydifferentreponame.

<quote>
hello joachim at secworks.se, this is git at cryptech running gitolite3
v3.5.2-0-g926bd5f on git 1.8.5.2

 R   C	[a-zA-Z0-9].*
 R  	gitolite-admin
 R W	test2
 R  	testing
 R W	verydifferentreponame
</quote>

I can clone these new repos. But when I try to push to test2 I get
another issue:

<quote>
#> git push
Counting objects: 3, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (2/2), done.
Writing objects: 100% (3/3), 314 bytes | 0 bytes/s, done.
Total 3 (delta 0), reused 0 (delta 0)
remote: ***
remote: *** Improperly signed commit, not allowed:
8e2e374e291b5634c70e0eda6df136b14ba095b0 N -- checked but no further result
remote: ***
remote: FATAL: VREF/gpg-check: helper program exit status 256
remote: error: hook declined to update refs/heads/master
To git at cryptech.is:test2
 ! [remote rejected] master -> master (hook declined)
error: failed to push some refs to 'git at cryptech.is:test2'
</quote>

Finally a minor issue. I get "PTY allocation request failed on channel
0" when talking to gitolite over ssh:

<quote>
ssh git at cryptech.is
PTY allocation request failed on channel 0
hello joachim at secworks.se, this is git at cryptech running gitolite3
v3.5.2-0-g926bd5f on git 1.8.5.2

 R   C	[a-zA-Z0-9].*
 R  	gitolite-admin
 R W	test2
 R  	testing
 R W	verydifferentreponame
Connection to cryptech.is closed.
</quote>

The problem seems to be related to different version of ssh:
https://stackoverflow.com/questions/10330678/gitolite-pty-allocation-request-failed-on-channel-0

Diabling pseudo-tty allocation in ssh makes the warning go away:

<quote>
ssh -T git at cryptech.is
hello joachim at secworks.se, this is git at cryptech running gitolite3
v3.5.2-0-g926bd5f on git 1.8.5.2

 R   C	[a-zA-Z0-9].*
 R  	gitolite-admin
 R W	test2
 R  	testing
 R W	verydifferentreponame
</quote>

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
 Joachim Strömbergson          Secworks AB          joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=YfDo
-----END PGP SIGNATURE-----