Mail Archives: cygwin/2005/02/18/12:13:42
--1yeeQ81UyVL57Vl7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Feb 18, 2005 at 10:52:22AM -0500, Christopher Faylor wrote:
> On Fri, Feb 18, 2005 at 09:30:35AM -0500, Jean-Sebastien Trottier wrote:
> >On Wed, Feb 16, 2005 at 11:23:03AM -0800, David Rothenberger wrote:
> >> I'm having a problem with the 20050215 snapshot (and the 20050131 as
> >> well). My ssh-agent connection is not being forwarded by ssh. This is
> >> working fine with the 20041119 snapshot.
> >>=20
> >> Here are the steps to reproduce the problem. I've got ssh and sshd
> >> correctly configured to forward ssh-agent connections. The second ssh
> >> command should not prompt to the public key passphrase.
> >>=20
> >> % keychain ~/.ssh/id_dsa
> >>=20
> >> KeyChain 2.0.3; http://www.gentoo.org/projects/keychain
> >> Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
> >> * All previously running ssh-agent(s) have been stopped.
> >> * Initializing /home/drothe/.keychain/tela-sh file...
> >> * Initializing /home/drothe/.keychain/tela-csh file...
> >> * Starting new ssh-agent
> >> * 1 more keys to add...
> >> Enter passphrase for /home/drothe/.ssh/id_dsa:
> >> Identity added: /home/drothe/.ssh/id_dsa (/home/drothe/.ssh/id_dsa)
> >>=20
> >> % . ~/.keychain/tela-sh
> >> % ssh `hostname`
> >> % ssh `hostname`
> >> Enter passphrase for key '/home/drothe/.ssh/id_dsa':
> >
> >Have you tried " ssh -A `hostname` " instead... just to make sure the
> >ssh actually forwards the agent?
>=20
> Why would he have to do that? The first one worked. The second one fail=
ed.
>=20
Without -A or "ForwardAgent yes", the first ssh call will *NOT*
forward/create a channel to the ssh-agent to be used by the new shell
being opened.
Thus, the new shell, unless you source ~/.keychain/tela-sh in it again,
will not have an ssh-agent to talk to and will need to ask for the
passphrase again.
If you use -A, the first ssh call will forward an encrypted channel so
that the new shell can access your identity/passphrase for subsequent
ssh calls.
> >If this works (and it should), add "ForwardAgent yes" to your
> >~/.ssh/config file. see "man ssh_config" for details
>=20
> Ditto this. If the first invocation works then I don't think there is any
> reason to suspect configuration problems.
Ditto ;-)
Sebastien
>=20
> cgf
>=20
> --
> Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
> Problem reports: http://cygwin.com/problems.html
> Documentation: http://cygwin.com/docs.html
> FAQ: http://cygwin.com/faq/
>=20
--1yeeQ81UyVL57Vl7
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFCFiI1WHtULG0eY+ERAkMeAKCL986lnktmsQsEquZUjgW2mrJUnACfdS1e
eHgh5/FhWb8xmxlwrtHqJ7I=
=pxSP
-----END PGP SIGNATURE-----
--1yeeQ81UyVL57Vl7--
- Raw text -