Savannah NEEDS sftp; suggestions and offer of help

Savannah NEEDS sftp; suggestions and offer of help

[Jonathan Walther]

[-- Attachment #1.1: Type: text/plain, Size: 1918 bytes --]

Without sftp, I cannot use arch with my Savannah projects.  Two of my
projects depend on the arch revision system to be practical.

Now, sftp has been an ongoing problem at Savannah for a long time.  Rudy
has stated multiple times, publicly and in private, that he is stumped
on the problem.  I have read through the complete bug report logs on the
savannah-hackers mailing list, so I have an idea of what has been
suggested and tried before.

I request that Savannah upgrade the OpenSSH version from 3.4p1-0.0woody1
to 3.6.1p2-4.  I hope that will fix the problem.

If the above upgrade of the server doesn't fix the problem, may I please
have some sort of shell access to the server to poke around and get a
better idea of what the problem is.

I hereby volunteer to make an attempt to solve the problem.  I need
appropriate access levels to the appropriate machines, and a means of
communicating in real time with at least one Savannah admin to ask
questions as I go along.

The window of opportunity for one of my projects is closing.  I'd prefer
Savannah to be it's host.  Please reply speedily; I'd like to help
resolve the problem quickly.

By the trust vested in me as a Debian developer, I promise I won't do
anything untoward with any access I am given.

Jonathan

-- 

    It's not true unless it makes you laugh,                           
             but you don't understand it until it makes you weep.      

    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

                     Geek House Productions, Ltd.

  Providing Unix & Internet Contracting and Consulting,
  QA Testing, Technical Documentation, Systems Design & Implementation,
  General Programming, E-commerce, Web & Mail Services since 1998

Phone:   604-435-1205
Email:   djw@reactor-core.org
Webpage: http://reactor-core.org
Address: 2459 E 41st Ave, Vancouver, BC  V5R2W2

[-- Attachment #1.2: Type: application/pgp-signature, Size: 307 bytes --]

[-- Attachment #2: Type: text/plain, Size: 142 bytes --]

_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://mail.gnu.org/mailman/listinfo/emacs-devel

Re: [Savannah-hackers] Savannah NEEDS sftp; suggestions and offer of help

[Jaime E. Villate]

Hi Jonathan,

On Fri, Aug 01, 2003 at 12:49:19AM -0700, Jonathan Walther wrote:
> Without sftp, I cannot use arch with my Savannah projects.  Two of my
> projects depend on the arch revision system to be practical.
...
> I request that Savannah upgrade the OpenSSH version from 3.4p1-0.0woody1
> to 3.6.1p2-4.  I hope that will fix the problem.

The best I have been able to do was to update from 3.4p1-0.0woody1 to
3.4p1-1

Upgrading to 3.6.1p2-4 requires upgrading 32 packages, including the C
libraries and that is very risky. It would have to be done by someone who can
at least restart the server if necessary.

> If the above upgrade of the server doesn't fix the problem, may I please
> have some sort of shell access to the server to poke around and get a
> better idea of what the problem is.
Thanks.
do you already have a username in Savannah and have submitted the public
key for your server? if you don't, please send me the public key and I'll give
you access.

> I hereby volunteer to make an attempt to solve the problem.  I need
> appropriate access levels to the appropriate machines, and a means of
> communicating in real time with at least one Savannah admin to ask
> questions as I go along.
We can schedule a meeting in #savannah at irc.gnu.org. When are you available?

> The window of opportunity for one of my projects is closing.  I'd prefer
> Savannah to be it's host.  Please reply speedily; I'd like to help
> resolve the problem quickly.
and we'd be very grateful if you could solve the sftp issue which has puzzled
us for quite some time.

Regards,
Jaime

Re: Savannah NEEDS sftp; suggestions and offer of help

[Andreas Fuchs]

Today, Jonathan Walther <krooger@debian.org> wrote:
> Without sftp, I cannot use arch with my Savannah projects.  Two of my
> projects depend on the arch revision system to be practical.

If that adds weight to your request, another project which I had
intended to host on savannah, also depends on arch for version control.

> I hereby volunteer to make an attempt to solve the problem.  I need
> appropriate access levels to the appropriate machines, and a means of
> communicating in real time with at least one Savannah admin to ask
> questions as I go along.

I too have read through the bug logs and admin documentation and tried
the suggestions. So, if I can do anything to help test as an
unprivileged user, I'd be glad to.

> The window of opportunity for one of my projects is closing.  I'd
> prefer Savannah to be it's host.  Please reply speedily; I'd like to
> help resolve the problem quickly.

Right; the window of opportunity for savannah to act as a hosting
service for arch-controlled projects has been closed for too long. I'd
hate to see people resort to sf.net for arch-controlled projects just
because they offer working sftp and savannah doesn't.

> By the trust vested in me as a Debian developer, I promise I won't do
> anything untoward with any access I am given.

As I'm not a debian developer and have no other token of trustworthiness
to show, I volunteer as an unprivileged tester. (-:

I hope we'll get this resolved soon.

-- 
Andreas Fuchs, <asf@acm.org>, asf@jabber.at, antifuchs

Re: [Savannah-hackers] Savannah NEEDS sftp; suggestions and offer of help

[Jonathan Walther]

[-- Attachment #1: Type: text/plain, Size: 2461 bytes --]

On Fri, Aug 01, 2003 at 10:48:37AM +0100, Jaime E. Villate wrote:
>On Fri, Aug 01, 2003 at 12:49:19AM -0700, Jonathan Walther wrote:
>> Without sftp, I cannot use arch with my Savannah projects.  Two of my
>> projects depend on the arch revision system to be practical.
>....
>> I request that Savannah upgrade the OpenSSH version from 3.4p1-0.0woody1
>> to 3.6.1p2-4.  I hope that will fix the problem.
>
>The best I have been able to do was to update from 3.4p1-0.0woody1 to
>3.4p1-1
>
>Upgrading to 3.6.1p2-4 requires upgrading 32 packages, including the C
>libraries and that is very risky. It would have to be done by someone who can
>at least restart the server if necessary.

The risk seems low; I and other Debian developers have been using the
current C libraries for a couple weeks now and they are working nicely.

>Thanks.
>do you already have a username in Savannah and have submitted the public
>key for your server? if you don't, please send me the public key and I'll give
>you access.

I have the username "djw".  I have uploaded my ssh version 1 public key.
Is there another key I need to upload?

>We can schedule a meeting in #savannah at irc.gnu.org. When are you available?

I just got called out for an emergency at my organic garden on the other
side of town.  I should be back within three hours.  How about I email
you then?  I can be reached by email, or at the phone number in the
signature of this email.  I will leave my client idling in #savannah on
irc.gnu.org.  I look forward to seeing you there when I get back.

>and we'd be very grateful if you could solve the sftp issue which has puzzled
>us for quite some time.

And I'll be grateful for being given the opportunity :-)

Future emails will be to you only; henceforth I'm trimming the Cc list.

Cheers!

Jonathan

-- 

    It's not true unless it makes you laugh,                           
             but you don't understand it until it makes you weep.      

    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

                     Geek House Productions, Ltd.

  Providing Unix & Internet Contracting and Consulting,
  QA Testing, Technical Documentation, Systems Design & Implementation,
  General Programming, E-commerce, Web & Mail Services since 1998

Phone:   604-435-1205
Email:   djw@reactor-core.org
Webpage: http://reactor-core.org
Address: 2459 E 41st Ave, Vancouver, BC  V5R2W2

[-- Attachment #2: Type: application/pgp-signature, Size: 307 bytes --]

Re: [Savannah-hackers] Savannah NEEDS sftp; suggestions and offer of help

[Sam Vilain]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


    The risk seems low; I and other Debian developers have been using the
    current C libraries for a couple weeks now and they are working
    nicely.

Yes, upgrading the C libraries is asking for trouble. Why not just
build the newer version against your distribution?

  sudo apt-get install build-essential fakeroot
  apt-get build-dep ssh
  apt-get source ssh
  cd `ls -dt openssh*|head -1`
  dpkg-buildpackage -b -uc -rfakeroot
  cd ..
  scp ssh*deb savannah.gnu.org:
    [...]

If it saves you time, there's a binary for 3.6.1p2 compiled in this
manner for debian stable at:

  http://vilain.net/ssh_3.6.1p2-4_i386.deb

[md5 b68f3c6b8ad231b5f3382178027b8359]
- -- 
Sam Vilain, sam@vilain.net

Real software engineers eat quiche.





-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/KxsTpCUwqQW1LxMRAoeFAKDD8TaaQNFe6WuJ4s1+oSQf1Bq3pwCgv0iF
s5goFGs+w9Fce+ebX7P44Kc=
=gl3k
-----END PGP SIGNATURE-----

Re: [Savannah-hackers] Savannah NEEDS sftp; suggestions and offer of help

[Rudy Gevaert]

On Sat, Aug 02, 2003 at 02:59:44AM +0100, Sam Vilain wrote:
> Yes, upgrading the C libraries is asking for trouble. Why not just
> build the newer version against your distribution?

I think we should first try to fix the problem instead of upgrading
and trying to fix the problem.

Jaime will handle the account permissions.


-- 
Rudy Gevaert                rudy@gnu.org		
Web page                    http://www.webworm.org
GNU/Linux for schools       http://www.nongnu.org/glms
Savannah hacker             http://savannah.gnu.org
		                        

Re: [Savannah-hackers] Savannah NEEDS sftp; suggestions and offer of help

[Nic]

Rudy Gevaert <rudy@gnu.org> writes:

> On Sat, Aug 02, 2003 at 02:59:44AM +0100, Sam Vilain wrote: 
> > Yes, upgrading the C libraries is asking for trouble. Why not just 
> > build the newer version against your distribution? 
>  
> I think we should first try to fix the problem instead of upgrading 
> and trying to fix the problem. 
>  

Rudy asked me to take a look into this the other day. I looked at the
log of the call. From that it seems that the problem is solved. The
cvssh script needs to be hacked to allow people to call the sftp
service.


Did that happen?

Did it not work?

Was there a follow up problem?


-- 
Nic Ferrier
http://www.tapsellferrier.co.uk

Re: [Savannah-hackers] Savannah NEEDS sftp; suggestions and offer of help

[Jonathan Walther]

[-- Attachment #1: Type: text/plain, Size: 2387 bytes --]

On Sat, Aug 02, 2003 at 03:04:10PM +0100, Nic wrote:
>> On Sat, Aug 02, 2003 at 02:59:44AM +0100, Sam Vilain wrote: 
>> > Yes, upgrading the C libraries is asking for trouble. Why not just 
>> > build the newer version against your distribution? 
>>  
>> I think we should first try to fix the problem instead of upgrading 
>> and trying to fix the problem. 
>>  
>
>Rudy asked me to take a look into this the other day. I looked at the
>log of the call. From that it seems that the problem is solved. The
>cvssh script needs to be hacked to allow people to call the sftp
>service.
>
>
>Did that happen?

No, someone else was supposed to do some "chroot" work on it, but didn't
get around to it.

>Did it not work?

We won't know till we try it.

>Was there a follow up problem?

Just the original problem.

I've been hanging out on irc.gnu.org #savannah for two days now as
SirDibos.  Noone has come by to chat with me or give me the promised
access to look around and do some third-party diagnosis.  I will
continue to idle there.  I hope someone shows up during the daytime
tomorrow (Sunday).

Normally I would support Rudy in trying to fix the problem without
upgrading.  But at this point it looks like most other things HAVE been
tried.  Who knows what sftp bugs have been fixed between the 3.4 version
of sshd run by *.gnu.org, and the 3.6 version currently recommended by
the OpenSSH team?  Given how easy it is, what do we have to lose?
OpenSSH_3.6 has been beaten on and used by thousands for the past few
months; it should be pretty risk free to drop it in as some other
list-members have suggested using apt-get source and dpkg-buildpackage.

Jonathan

PS: irc.gnu.org does still point to irc.freenode.net, right?

-- 

    It's not true unless it makes you laugh,                           
             but you don't understand it until it makes you weep.      

    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

                     Geek House Productions, Ltd.

  Providing Unix & Internet Contracting and Consulting,
  QA Testing, Technical Documentation, Systems Design & Implementation,
  General Programming, E-commerce, Web & Mail Services since 1998

Phone:   604-435-1205
Email:   djw@reactor-core.org
Webpage: http://reactor-core.org
Address: 2459 E 41st Ave, Vancouver, BC  V5R2W2

[-- Attachment #2: Type: application/pgp-signature, Size: 307 bytes --]