Hi Shmuel,

The Gerrit system has two independent SSH daemons - one for OS management and another for use with Git. You may notice in your output that ports you are connecting to are different. Please use port 29418 for git pulls over SSH. Tell me if that helps.

On Sun, Aug 27, 2017 at 4:35 PM, Shmuel Melamud <smelamud@redhat.com> wrote:
Hi!

Today I found that git pull from Gerrit works on my laptop by doesn't
work on my VM in RHEV-TLV. Both the laptop and the VM have their
public SSH keys registered on gerrit.ovirt.org and both resolve
gerrit.ovirt.org as 107.22.212.69. But git pull on the laptop works
OK, but on the VM returns "Permission denied
(publickey,gssapi-keyex,gssapi-with-mic)".

Investigation shows that gerrit.ovirt.org visible for laptop has:

Fingerprint:
55:d7:e6:19:23:19:a6:ca:2a:07:b0:3c:fa:bd:14:88
Entry for ~/.ssh/known_hosts:
[gerrit.ovirt.org]:29418,[107.22.212.69]:29418 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAqgWNlffhq...XtFgTvGQ==

But gerrit.ovirt.org visible for laptop has:

Fingerprint:
e5:5b:1c:2f:49:c3:01:6b:24:f5:dd:7e:11:ee:f0:a7
Entry for ~/.ssh/known_hosts:
gerrit.ovirt.org,107.22.212.69 ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAyt/BaplDZPW+meN2ZLhY7vyU0xC...BGWRN7aceXQ==

The first is the key of the real Gerrit host and the second is some other key.

How it can happen?

Shmuel
_______________________________________________
Infra mailing list
Infra@ovirt.org
http://lists.ovirt.org/mailman/listinfo/infra



--
Regards,
Evgheni Dereveanchin