Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-21975

Cannot sftp into home.apache.org: "LDAP authorisation check failed"

    XMLWordPrintableJSON

    Details

    • Type: Project
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: None
    • Component/s: LDAP, Website
    • Labels:
    • Project:
      Infrastructure

      Description

      I cannot login into home.apache.org -- tried today for the first time and I am encountering this problem.

      I uploaded my public SSH keys to the self-service app and they seem to be accepted.

      ```
      sftp -vv pgaref@home.apache.org
      ....
      debug2: pubkey_prepare: done
      debug1: SSH2_MSG_EXT_INFO received
      debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
      debug2: service_accept: ssh-userauth
      debug1: SSH2_MSG_SERVICE_ACCEPT received
      debug1: Authentications that can continue: publickey
      debug1: Next authentication method: publickey
      debug1: Offering public key: /Users/panosgarefalakis/.ssh/id_rsa RSA SHA256:gIHdvHJ32+Kw3Ywo5B+WYzG+AK8e0l+iRVLNghYSRNw
      debug2: we sent a publickey packet, wait for reply
      debug1: Server accepts key: /Users/panosgarefalakis/.ssh/id_rsa RSA SHA256:gIHdvHJ32+Kw3Ywo5B+WYzG+AK8e0l+iRVLNghYSRNw
      LDAP authorisation check failed
      Connection closed by 163.172.16.173 port 22
      Connection closed
      ```

      Seems same issue as: https://issues.apache.org/jira/browse/INFRA-21594

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                cml Chris Lambertus
                Reporter:
                pgaref Panagiotis Garefalakis
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: