cvs up problems

[Abdul Rehman Gani]

Hi,

Two problems when doing a cvs up:-

1. anoncvs.nyc.openbsd.org does not exist:-

# dig anoncvs.nyc.openbsd.org

; <<>> DiG 9.4.2-P2 <<>> anoncvs.nyc.openbsd.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58583
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;anoncvs.nyc.openbsd.org.       IN      A

;; Query time: 545 msec
;; SERVER: 146.230.128.13#53(146.230.128.13)
;; WHEN: Fri Nov  6 17:03:43 2009
;; MSG SIZE  rcvd: 41


2. anoncvs.de.openbsd.org's host key has changed. The only reference I  
can find to the host key for this server is on http://www.openbsd.org/de/anoncvs.html 
  and that key is different to the one reported below.

# ssh anoncvs.de.openbsd.org
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle  
attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
bc:8e:dd:84:2d:6a:ed:6d:33:e7:46:d9:83:00:1b:ff.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this  
message.
Offending key in /root/.ssh/known_hosts:2
RSA host key for anoncvs.de.openbsd.org has changed and you have  
requested strict checking.
Host key verification failed.

My CVSROOT is set to anoncv@...:/cvs. I also tried  
using anoncvs.usa.openbsd.org but I still get one or the other error  
above. I assume that there is some kind of redirecting going on. On  
some of my servers the update completed without a hitch.

Any help appreciated.

Thanks,

Abdul

[Bryan Brake]

On Fri, Nov 6, 2009 at 07:09, Abdul Rehman Gani
<abdulg-lists@...> wrote:

> Hi,
>
> Two problems when doing a cvs up:-
>
> 1. anoncvs.nyc.openbsd.org does not exist:-
>
> # dig anoncvs.nyc.openbsd.org
>
> ; <<>> DiG 9.4.2-P2 <<>> anoncvs.nyc.openbsd.org
> ;; global options: B printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58583
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;anoncvs.nyc.openbsd.org. B  B  B  IN B  B  B A
>
> ;; Query time: 545 msec
> ;; SERVER: 146.230.128.13#53(146.230.128.13)
> ;; WHEN: Fri Nov B 6 17:03:43 2009
> ;; MSG SIZE B rcvd: 41
>
>
> 2. anoncvs.de.openbsd.org's host key has changed. The only reference I can
> find to the host key for this server is on
> http://www.openbsd.org/de/anoncvs.htmlB and that key is different to the

one

> reported below.
>
> # ssh anoncvs.de.openbsd.org
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @ B  B WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! B  B  @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle attack)!
> It is also possible that the RSA host key has just been changed.
> The fingerprint for the RSA key sent by the remote host is
> bc:8e:dd:84:2d:6a:ed:6d:33:e7:46:d9:83:00:1b:ff.
> Please contact your system administrator.
> Add correct host key in /root/.ssh/known_hosts to get rid of this message.
> Offending key in /root/.ssh/known_hosts:2
> RSA host key for anoncvs.de.openbsd.org has changed and you have requested
> strict checking.
> Host key verification failed.
>
> My CVSROOT is set to anoncv@...:/cvs. I also tried using
> anoncvs.usa.openbsd.org but I still get one or the other error above. I
> assume that there is some kind of redirecting going on. On some of my
> servers the update completed without a hitch.
>
> Any help appreciated.
>
> Thanks,
>
> Abdul
>
>

delete the affected key in your /root/.ssh/known_hosts...  it says
that in the error message...  either delete the affected key, or add
the new host key...

[Robert-101]

On Fri, 6 Nov 2009 17:09:58 +0200
Abdul Rehman Gani <abdulg-lists@...> wrote:

> Hi,
>
> Two problems when doing a cvs up:-
>
> 1. anoncvs.nyc.openbsd.org does not exist:-
>
> # dig anoncvs.nyc.openbsd.org
>
> ; <<>> DiG 9.4.2-P2 <<>> anoncvs.nyc.openbsd.org
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58583
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL:
> 0
>
> ;; QUESTION SECTION:
> ;anoncvs.nyc.openbsd.org.       IN      A
>
> ;; Query time: 545 msec
> ;; SERVER: 146.230.128.13#53(146.230.128.13)
> ;; WHEN: Fri Nov  6 17:03:43 2009
> ;; MSG SIZE  rcvd: 41

# host anoncvs.nyc.openbsd.org
Host anoncvs.nyc.openbsd.org not found: 3(NXDOMAIN)

That host is only mentioned in the pl and hu translation which are
probably outdated/unmaintained.

> 2. anoncvs.de.openbsd.org's host key has changed. The only reference
> I can find to the host key for this server is on
> http://www.openbsd.org/de/anoncvs.html and that key is different to
> the one reported below.
>
> # ssh anoncvs.de.openbsd.org
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle  
> attack)!
> It is also possible that the RSA host key has just been changed.
> The fingerprint for the RSA key sent by the remote host is
> bc:8e:dd:84:2d:6a:ed:6d:33:e7:46:d9:83:00:1b:ff.
> Please contact your system administrator.
> Add correct host key in /root/.ssh/known_hosts to get rid of this  
> message.
> Offending key in /root/.ssh/known_hosts:2
> RSA host key for anoncvs.de.openbsd.org has changed and you have  
> requested strict checking.
> Host key verification failed.

anoncvs.de.openbsd.org is still out of service after hardware problems,
the system probably hasn't been fully restored yet and the key you see
is one generated after a reinstall. (eg. no ftp access yet)
 
> My CVSROOT is set to anoncv@...:/cvs. I also tried  
> using anoncvs.usa.openbsd.org but I still get one or the other error  
> above. I assume that there is some kind of redirecting going on. On  
> some of my servers the update completed without a hitch.

anoncvs.openbsd.org and anoncvs.usa.openbsd.org work fine for me.
as suggested remove the key from known_hosts.
try to connect again and compare the key to what you find on the
openbsd site.

>
> Any help appreciated.
>
> Thanks,
>
> Abdul

[Abdul Rehman Gani]

Robert writes:


>
> anoncvs.de.openbsd.org is still out of service after hardware problems,
> the system probably hasn't been fully restored yet and the key you see
> is one generated after a reinstall. (eg. no ftp access yet)

Great, so anoncvs.de.openbsd.org has a new key. I can't find a reference to
the key on www.openbsd.org. Can someone confirm that the key I see is
correct?

>  
>
> anoncvs.openbsd.org and anoncvs.usa.openbsd.org work fine for me.
> as suggested remove the key from known_hosts.
> try to connect again and compare the key to what you find on the
> openbsd site.

I am using these servers, but partway through the update I get the error
about nyc or the warning about de. Is the connection being redirected at
some point? I don't know enough about cvs to answer that.

Thanks,

Abdul

>
>>
>> Any help appreciated.
>>
>> Thanks,
>>
>> Abdul

[Robert-101]

On Fri, 06 Nov 2009 23:56:49 +0200
"Abdul Rehman Gani" <abdulg-lists@...> wrote:

> Robert writes:
>
>
> >
> > anoncvs.de.openbsd.org is still out of service after hardware
> > problems, the system probably hasn't been fully restored yet and
> > the key you see is one generated after a reinstall. (eg. no ftp
> > access yet)
>
> Great, so anoncvs.de.openbsd.org has a new key. I can't find a
> reference to the key on www.openbsd.org. Can someone confirm that the
> key I see is correct?
>

You don't find a key on the site for anoncvs.de. because that mirror is
out of order right now. That is why it is not listed.
Just don't use it, atm.
It will be added to the list when it is available again.

> >  
> >
> > anoncvs.openbsd.org and anoncvs.usa.openbsd.org work fine for me.
> > as suggested remove the key from known_hosts.
> > try to connect again and compare the key to what you find on the
> > openbsd site.
>
> I am using these servers, but partway through the update I get the
> error about nyc or the warning about de. Is the connection being
> redirected at some point? I don't know enough about cvs to answer
> that.

There might be somthing on your end that messes with that connection,
but that is unlikely.
A usual "cvs up" wont try to change the server used midway.

What exactly are you tring to do and what commands do you use?
Could you copy paste the commands and the (relevant) output/errors you
get? (Don't have to send the whole list of files touched.)

Only thing where multiple servers might come into play i can think of
is while updating packages with pkg_add.
Are you doing that? If so, do you have .de. and .nyc. in your PKG_PATH
enviroment variable?

- Robert

[Stuart Henderson]

On 2009-11-06, Abdul Rehman Gani <abdulg-lists@...> wrote:

> Robert writes:
>
>
>>
>> anoncvs.de.openbsd.org is still out of service after hardware problems,
>> the system probably hasn't been fully restored yet and the key you see
>> is one generated after a reinstall. (eg. no ftp access yet)
>
> Great, so anoncvs.de.openbsd.org has a new key. I can't find a reference to
> the key on www.openbsd.org. Can someone confirm that the key I see is
> correct?
>
>>  
>>
>> anoncvs.openbsd.org and anoncvs.usa.openbsd.org work fine for me.
>> as suggested remove the key from known_hosts.
>> try to connect again and compare the key to what you find on the
>> openbsd site.
>
> I am using these servers, but partway through the update I get the error
> about nyc or the warning about de. Is the connection being redirected at
> some point? I don't know enough about cvs to answer that.

You did a checkout or update against those other servers sometime
in the past and it has remembered them (in CVS/Root in the relevant
directories).

Use a specific mirror on the command line e.g. "cvs -d $CVSROOT up"
and/or remove the CVS/Root files.