[19:27:11] It feels like yesterday was March 15, 2005 [19:28:05] "wikibase-registry.wmflabs.org" has long stopped being a real thing, it's now a redirect, but hopefully the redirect persists indefinitely because cool links don't break [20:11:06] I can't login to login.tools.wmflabs.org for the past two days, can anyone help me? [20:13:35] please see https://lists.wikimedia.org/hyperkitty/list/cloud-announce@lists.wikimedia.org/thread/5M4AXAJJNHGMBVFS5DRBUYGAQBDG3G23/ – you’re probably affected by 1) and 2) [20:13:41] (would be my guess, at least) [20:27:32] Thank you. I just tried it, and I confirmed that https://idm.wikimedia.org/keymanagement/ already has the ssh2 public key I'm using, but the server says: Unable to authenticate using any of the configured authentication methods. [20:27:32] How do I fix this? [20:31:37] Are you using PuTTY? [21:05:02] I used PuTTY, generated and uploaded a new ssh-rsa, and the response is that "key type 'ssh-rsa' is not a certificate", so it still doesn't work... [21:09:04] the email says that an ECDSA key is recommended [21:09:29] I think in theory some RSA configurations should still work but it’s probably better to stick with ECDSA (assuming PuTTY supports it, but I’d be surprised if it didn’t) [21:09:53] you get much shorter keys that way too, if you ever have to type them in by hand ;) [21:10:15] that's right. not all RSA keys are a problem, but those generated by puttygen are [21:10:23] or especially one ones [21:10:31] make sure you're using PuTTY 0.81, as previous versions had a bug in key generation [21:10:32] it's about the algo used to sign them [21:16:51] sidenote, but shouldn't we be recommending Ed25519 over ECDSA? [21:17:20] oh, right, I didn’t even notice that [21:17:55] which it looks like puttygen calls EdDSA at 255 bits [21:19:40] I changed to ECDSA and unfortunately still get the same error message... [21:20:19] "is not a certificate" sounds like something else is wrong [21:20:23] Yes, I'm using the latest version of PuTTY. [21:21:44] where are you getting that “not a certificate” error? on idm.wikimedia.org or from PuTTY? [21:22:05] PuTTY [21:23:20] are you following the docs on wikitech that are for putty? with the screenshots? [21:25:44] SSH certificates and SSH keys arent exactly the same thing. a certificate contains a key but is also signed by a CA. this sounds like you are adding the key in the wrong form in putty, tbh [21:25:58] I meant.. in the wrong form field [21:27:17] is this where you are adding it? https://wikitech.wikimedia.org/wiki/Help:Access_to_Toolforge_instances_with_PuTTY_and_WinSCP#/media/File:20130526_2133_Putty_Login_Connection_SSH_Auth.png [21:27:24] private key file... [21:31:00] !log bsadowski1@tools-bastion-13 tools.stewardbots Restarted StewardBot/StewardBot because of a connection loss [21:31:02] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stewardbots/SAL [21:47:39] Thank you for your help. I found the problem. I didn't enter a username, which is a cheap mistake. But I think it would be better if putty's error message included this part. [21:49:16] What software do you use to connect to Toolforge? [21:52:34] I think a lot of Toolforge devs I know are Linux-based or Mac-based and use OpenSSH [21:52:46] but that’s probably not super useful to you ^^ [21:54:51] Win 10 and 11 can/do include openssh [21:54:57] I use putty :P [22:06:11] !log anticomposite@tools-bastion-13 tools.stewardbots ./stewardbots/StewardBot/manage.sh restart # IRC connection failed, try again [22:06:13] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stewardbots/SAL [23:54:35] !log anticomposite@tools-bastion-13 tools.stewardbots stewardbots/StewardBot/manage.sh stop && stewardbots/StewardBot/manage.sh start # T371740 [23:54:38] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stewardbots/SAL