Re: [Ken Hornstein <address@hidden>] [Savannah-hackers] Problems storing files in download area

[Hugo Gayosso]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> From:  Ken Hornstein <address@hidden>
> Subject: [Savannah-hackers] Problems storing files in download area
> To: address@hidden
> Date: Mon, 26 Jan 2004 14:40:13 -0500
> 
> Howdy.  I'm the administrator of the nmh project (it's on 
> savannah.nongnu.org).
> 
> I've been unable to upload new files to the project area.  Specifically,
> sftp fails with "Request for subsystem 'sftp' failed on channel 0", and
> scp just hangs and doesn't do anything.  I've verified ssh does work for
> me (by using cvs); am I doing something wrong, or does file uploading still
> not work?

Hello Ken, I don't know if the sysadmins got back to you, but here is
some info that might be useful:


https://savannah.gnu.org/forum/forum.php?forum_id=2838


Files that were in the download areas on Savannah before the
compromise can be downloaded from ftp://ftp.gnu.org/savannah/files.
We kindly ask project administrators to verify the integrity of those
files and use the following procedure to upload them to the new file
areas on Savannah.

Savannah has a new system to handle uploads of files to the download
area in a secure way. Project administrators are the only ones
allowed to upload files at this time.

To begin, please add your GPG key by logging in to Savannah and
visiting one of the following URLs:

https://savannah.gnu.org/account/change.php?item=gpgkey

https://savannah.nongnu.org/account/change.php?item=gpgkey

Within 2 hours the system should have updated the files necessary for
uploads.

After that time, use the following procedure to upload files:

For each upload destined for Savannah, two files need to be
uploaded via ftp to the site.

(1) File to distributed (eg. foo.tar.gz)

(2) Detached GPG binary signature for (1) (using gpg -b)
(eg. foo.tar.gz.sig)

The files should be uploaded via anonymous ftp to savannah.gnu.org.
and placed in the /incoming/savannah/<projectname> directory. For
example, to place foo.tar.gz in project bar's download area, upload
foo.tar.gz and foo.tar.gz.sig to:

ftp://savannah.gnu.org/incoming/savannah/bar

Uploads are processed every five minutes. Uploads that are in
progress when the upload processing script is running are handled
properly, so do not worry about the timing of your upload.

Currently there is no easy way to manipulate (move, rename, delete, or
work in subdirectories) with the new system. If you are an
experienced PHP programmer and would like to help add this
functionality, please contact us.

If you have questions about this process, please contact us at
<<address@hidden>>.

Thank you for your patience. 

- -- 
Hugo Gayosso
GNU Savannah Support
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAOt4AMNObVRBZveYRAmv5AJ4jqzfP00XSaN522PKxnF++zLCXQwCfQ3mb
+3GqgQtaMJ9Chr+xEyDqqD4=
=iaWb
-----END PGP SIGNATURE-----