我已经构建了一个对特定文件夹执行 git fetch 的 php 脚本:
确切的命令是:
usr/bin/git --git-dir=/home/bathan/www/sync_test/repo3//.git --work-tree=/home/bathan/www/sync_test/repo3/ fetch
当然,如果我在命令行上运行它,它会完美运行。
现在,当我使用 shell_exec 运行它时,我收到以下错误:
Permission denied, please try again. Permission denied, please try again. Permission denied (publickey,gssapi-with-mic,password). fatal: The remote end hung up unexpectedly
查看它尝试连接的服务器,确切的错误是:
4 月 8 日 10:52:17 myserver sshd [26230]:来自 192.15.136.253 端口 32878 ssh2 的 git 密码失败
那么好吧。我猜这个 shell_exec 无法读取我设置的 ~/.ssh/id_rsa 密钥。所以我给那个文件 777 权限,我得到了这个错误。
@@@@@ @ 警告:未受保护的私钥文件!@ @@@ '/home/bathan/.ssh/id_rsa' 的权限 0777 太开放了。建议其他人不能访问您的私钥文件。此私钥将被忽略。权限错误:忽略键:/home/bathan/.ssh/id_rsa 权限被拒绝,请重试。权限被拒绝,请重试。权限被拒绝(公钥、gssapi-with-mic、密码)。致命:远端意外挂断
所以我猜 git 能够读取密钥文件。如果我把它放回正确的权限,我会再次回到第一个错误。
注意:我的 apache 服务器设置为使用我的同一个用户(bathan)运行,这是一个 ubuntu 盒子。
这是 ssh -v 响应
OpenSSH_5.5p1 Debian-4ubuntu5, OpenSSL 0.9.8o 01 Jun 2010
Pseudo-terminal will not be allocated because stdin is not a terminal.
debug1: Reading configuration data /home/bathan/.ssh/config
debug1: Applying options for gitserver
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to git.myserver.com [77.171.171.229] port 22.
debug1: Connection established.
debug1: identity file /home/bathan/.ssh/id_rsa type 1
debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-1023
debug1: Checking blacklist file /etc/ssh/blacklist.RSA-1023
debug1: identity file /home/bathan/.ssh/id_rsa-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
debug1: match: OpenSSH_4.3 pat OpenSSH_4*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.5p1 Debian-4ubuntu5
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'git.myserver.com' is known and matches the RSA host key.
debug1: Found key in /home/bathan/.ssh/known_hosts:4
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure. Minor code may provide more information
Credentials cache file '/tmp/krb5cc_1000' not found
..
..
有任何想法吗?