7

There are lots of stack articles citing the same error message as I am getting.

I went through the entire heroku setup doc on another computer and everything worked perfectly. Not sure why this one is not working, but I need it to.

When I run:

> git push -v heroku master

Pushing to git@heroku.com:lit-tor-7969.git
Permission denied (publickey).
fatal: The remote end hung up unexpectedly

All of the solutions on Stack involve reseting the ssh keys, and I believe the ssh keys are fine. I am on Mac OSX and have run:

heroku keys:clear
heroku keys:add

So it looks to me like the git is using /Users/bishopz/.ssh keys rather than the keys I generated manually inside the repository folder.

In addition to the answers below, this article seems to be providing a lot of insight: Cannot push to Heroku because key fingerprint

I tried completely removing the .ssh directory. I ran

heroku keys:clear
ssh-add -D #to remove all ssh identities
ssh-keygen -t rsa -C "email@gmail.com" -f  ~/.ssh/id_rsa_heroku
ssh-add ~/.ssh/id_rsa_heroku
heroku keys:add ~/.ssh/id_rsa_heroku.pub
git push heroku master

and now get:

!  Your key with fingerprint 27:5f:64:4e:2e:f0:41:5b:62:a9:95:d2:02:df:27:85 is not authorized to access lit-tor-7969.
fatal: The remote end hung up unexpectedly

The response to 

ssh -vvv git@heroku.com

is now:

debug1: Host 'heroku.com' is known and matches the RSA host key.
debug1: Found key in /Users/bishopz/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: Offering RSA public key: /Users/bishopz/.ssh/id_rsa_heroku
debug1: Server accepts key: pkalg ssh-rsa blen 279
debug1: Authentication succeeded (publickey).
Authenticated to heroku.com ([50.19.85.132]:22).

Any help appreciated, I'll start a new bounty if someone can post an answer that works for me.

Community
  • 1
  • 1
BishopZ
  • 6,269
  • 8
  • 45
  • 58
  • Are you sure you're adding the keys to the right account? Perhaps you're logged in to the wrong Heroku account. Perhaps try `heroku login`. – arbales Nov 22 '12 at 20:43
  • 1
    Do you have the right protection on ssh directory (and parent directories) and files? See http://stackoverflow.com/questions/13425811/git-ssh-authentication/13428529#13428529 for instance. – VonC Nov 23 '12 at 07:10
  • @BishopZ: can you post the output of `git push -v heroku master`? `git config -l`? – mgarciaisaia Nov 29 '12 at 03:13

4 Answers4

7

This question is not really about git than about ssh. :)

Heroku uses git which uses ssh which allows only authentication by publickey. (But I think that is already clear.)

heroku keys:add will send the public key to heroku. Unless you specify an explicit key it will use ~/.ssh/id_[rd]sa.pub.

To authenticate successfully you need to present the matching private key. Unless specified otherwise ssh will use ~/.ssh/id_[rd]sa, but it will refuse to read it if permissions are too loose. (See man ssh section FILES for details.)

An easy way to check whether the permissions are fine is to add the key to the agent: ssh-add ~/.ssh/id_[rd]sa

This should either add the key to the agent (verify with ssh-add -L) or complain about wrong permissions. (In case no agent is running in the first place, you can start one with 'ssh-agent bash'.)

After adding the key to the agent, the agent will take care of authentication and also your git should be able to connect without problems. :)

michas
  • 25,361
  • 15
  • 76
  • 121
4

Okay, I was able to solve it. Several of these answers were helpful. It seem that two things had happened.

First, based on this article the ssh keys had gotten confused. This was resolved by deleting the .ssh directory (of course this removed all the credentials for other things that use .ssh, but those can be recreated later):

heroku keys:clear
ssh-add -D #to remove all ssh identities
ssh-keygen -t rsa -C "email@gmail.com" -f  ~/.ssh/id_rsa_heroku
ssh-add ~/.ssh/id_rsa_heroku
heroku keys:add ~/.ssh/id_rsa_heroku.pub

Secondly, based on an answer to this article the app name had somehow changed during the process of troubleshooting the ssh keys. The app name had to be manually edited in /repository_folder/.git/config

To get the correct app name I logged into heroku.com on the web and then updated the config file:

it's contains

[remote "heroku"]
    url = git@heroku.com:my_new_app_name.git
    fetch = +refs/heads/*:refs/remotes/heroku/*

Thanks to all that posted suggestions! I am so happy to finally be on my way to a new app!

--UPDATE--

I have to rerun this command every time I reboot the computer. I can add it my .profile or whatever, but thought it was worth a note.

Community
  • 1
  • 1
BishopZ
  • 6,269
  • 8
  • 45
  • 58
2

Depending on your setup. you might have a config file in your ~/.ssh/ directory that sets which file to be used as public key to use when pushing to heruko.

example (~/.ssh/config):

Host 127.0.0.1 #Use Heroku's IP
IdentityFile ~/.ssh/use_this_key

So if that is the case, then change the settings in the ~/.ssh/config file

Cheers

willoller
  • 7,106
  • 1
  • 35
  • 63
Rasmus Østergaard Kjær Voss
  • 1,806
  • 12
  • 10
  • I added config file in my ~/.ssh directory. Found the IP address, should the key be like id_rsa or id_rsa.pub? I tried both and neither seemed to work. – BishopZ Dec 09 '12 at 02:48
0

The permissions on both the .ssh directory and the repository directory are 555

What counts for ssh connections are the group and other permissions of:

  • /home/user/.ssh
  • /home/user
  • /home

(replace /home/user by the actual path of your home directory)

The idea is that group and other attribute permission for .ssh and all its parent directories must not be writable.

555 is fine for .ssh, although 700 is recommended.
Check its parent directories: 755 or 555 all the way up to / (no '2', '3' or '6', indicating a writable directory for group or other).

Community
  • 1
  • 1
VonC
  • 1,262,500
  • 529
  • 4,410
  • 5,250