The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
16 views

Install keychain on Amazon Linux AMI?

I have a github account that I would like to push to on a regular basis from an Amazon ec2 instance. In order to connect to the github account I have an SSH key that's passphrase protected, so in ...
1
vote
0answers
12 views

sshpass like ssh-agent or vice versa

I like to hold ssh logins for the runtime of a script. For public key authentication, ssh-agent can be used, allowing me to enter the key passphrase once when the script is started. However, that ...
0
votes
1answer
12 views

Openssh in VM authenticate using Pageant on host

Update: It looks like the network design was completely wrong and the auth flow should be the other way round instead. So this question is moot now. Current setup: Linux VM (assume common and most ...
2
votes
2answers
190 views

SSH by key incredibly slow

SSH connecting with key, from my machine suddenly got incredibly slow (~10sec!). It is not a server or DNS problem as far as I can figure out. The problem suddenly appeared after a simple apt-get ...
0
votes
0answers
70 views

`ssh-add -l` doesn't always print key paths

Recently, at least as of openssh 6.7_p1, ssh-add -l stopped, in some circumstances, printing the path to some ssh keys loaded in the agent. For example: 13:41:23 me@n00:~ $ ssh-add -l 256 ...
1
vote
1answer
2k views

ssh server config - input_userauth_request: invalid user

I have a problem configuring my SSH server to be able to log in with public key, without password. tail -f /var/log/auth.log gives Feb 6 14:56:06 ubuntu sshd[24654]: rexec line 26: Deprecated ...
0
votes
1answer
45 views

How to do SSH authentication and CVS update automatically from cron job?

I call a script from cron job. In the script it needs to run CVS commands to update from a remote repository. To do that, it needs to SSH authenticate. I put the following code in the script ... ...
0
votes
1answer
242 views

SSH using Agent Forwarding with Windows Host OS, Vagrant Ubuntu Guest OS, and Keepass/Keeagent

Intent: To be able to deploy to lan-example.com from any dev environment; whether it be directly from the virtual OS, or any single-OS system, or even over the internet using ONE SSH key stored in ...
0
votes
1answer
52 views

ssh-agent not caching one key, but caches another

I'm on Mac OS X 10.9.5 and ssh agent is working just fine for two of my keys (include the main one, ~/.ssh/id_rsa). However, for my AWS key, it asks me for the passphase every time. I'm unsure why. ...
0
votes
1answer
37 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
0
votes
0answers
34 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
0
votes
1answer
64 views

How to forward SSH agent connection to unqualified hostnames by default?

I have a number of local domains in my resolv.conf search order. I would very much like to forward SSH agent by default when I connect to an unqualified (without DNS suffix) hostname. The best I've ...
0
votes
0answers
19 views

How to lock pageant the same way ssh-add -x does?

Now that i understand how to highjack SSH_AGENT_SOCK & how to use it, it scares me that a fellow coworker, by having root access on any of my company server, might access to my personnal NAS. I ...
0
votes
1answer
180 views

OSX: ssh-agent caching passphrases…but when cleared?

I have a ssh RSA key in a client OSX 10.9.4. The SSH server is ubuntu. Everything works OK, but the problem is that my OSX ssh-agent seems to be caching the passphrases. The first time I ssh, it is ...
1
vote
2answers
111 views

copy between remote server with local authentication

When I need to copy some files between two remote servers, I usually scp -3 user@server1:path user@server2:path unfortunately, since that routes traffic through my machine, that is very slow when ...
3
votes
2answers
5k views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
2
votes
1answer
98 views

rsync from remote ssh server with forwarded keys

Context I am writing a synchronisation script to sync some web environments. Ex: Update integration from production (mostly to fetch new database rows and uploaded files) Some of my prerequisites ...
5
votes
1answer
414 views

Use a specific forwarded key from SSH-agent?

Let's say I have a key for Github, along with other keys. I've added lots of keys to my ssh agent (ssh-add -L returns lots of lines) at my home computer A. In my .ssh/config I have set up which key to ...
3
votes
3answers
44k views

SSH: Permission denied (publickey,gssapi-with-mic,password)

==================================================================== UPDATE: It turned out the configuration of sshd on host2 wont allow password login. Thanks to people answered this. Also don't ...
4
votes
2answers
1k views

SSH authentication between my VPS and Bitbucket fail

I'm trying to setup SSH authentication between my VPS and Bitbucket for configure later automatic deployment via Capistrano (for web projects) and Capifony (for Symfony2 projects) so I follow this ...
1
vote
2answers
856 views

ssh-agent needs to start each time on my server

I have used this bitbucket tutorial for providing ssh access to the git repo: https://confluence.atlassian.com/pages/viewpage.action?pageId=270827678 But now each time I want to use the git it says I ...
2
votes
2answers
697 views

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This ...
0
votes
0answers
38 views

ssh-add is required before each git push

Before I can git push / pull or capistrano deploy (using agent_forward => true) I have to run ssh-add command. If I try without this I get a publickey failure. Does anyone know why ssh-add is not ...
5
votes
1answer
2k views

SSH ForwardAgent multiple hops

I've been looking for a solution to the following problem for the past 2 hours with no luck. Development: I'm using publickey authentication to connect to my servers. I use ssh-agent forwarding in ...
0
votes
1answer
935 views

ssh agent forwarding fails with “Could not open a connection to your authentication agent”

I receive a Could not open a connection to your authentication agent error message when I attempt to connect from an intermediate server to a third server using the agent forwarding option (-A) of an ...
2
votes
6answers
3k views

Running ssh-agent from a shell script

I'm trying to create a shell script that, among other things, starts up ssh-agent and adds a private key to the agent. Example: #!/bin/bash # ... ssh-agent $SHELL ssh-add /path/to/key # ... The ...
0
votes
0answers
162 views

ssh-agent doesn't seem to end when user disconnects

On one of the servers that I manage i've just noticed that there are hundreds of "ssh-agent" processes running. I'm at a loss as to where to even start here. Is there something that I've forgotten to ...
1
vote
1answer
242 views

putty pageant - forget keys after period of inactivity

in the environment where windows client computers are used to run putty to connect to multiple linux servers i'm considering moving away from password based authentication and using public/private key ...
2
votes
2answers
435 views

ssh-add Has No Effect

I'm trying to add password-less ssh access to my Mac OS X 10.8.3 that acts as a server. I've followed instructions like this: http://osxdaily.com/2012/05/25/how-to-set-up-a-password-less-ssh-login/ ...
3
votes
2answers
168 views

Discrepancy in ssh-agent behavior

It seems like i'm having a bit of a discrepancy between the behavior of ssh-agent for two accounts I have configured. I wrote a simple monitoring script to check on the availability of some VMs we ...
4
votes
2answers
89 views

SSH: prevent from asking for passphrase when ssh-agent auth fails

I am writing a script to cycle through a list a known hostnames so as to find a working SSH server on which I can auth with my SSH key. The key is already loaded with ssh-agent and ssh-add, so if I ...
0
votes
1answer
188 views

Reverse ssh-agent forwarding. Using a remote ssh key

I have my github.com private ssh key in an ssh-agent on a key server. From my home computer behind NAT I want to run git pull and use my github ssh key. The only way I know of doing this is to ssh ...
1
vote
1answer
655 views

Is it possible to chain ssh-agent forwarding through multiple hops?

Suppose I have 4 machines, local, dmz, remote1, and remote2. I want to ssh from local to dmz then into remote1 and then scp a file from remote1 to remote2. Can I use ssh-agent forwarding to allow me ...
1
vote
1answer
231 views

Retain agent-forwarding in sudo

I want to be able to connect to a server, start a sudo shell, then use agent forwarding to connect to another server (in order to use SCP to copy files to a protected area). But: ...
2
votes
4answers
3k views

12.04LTS - could not open a connection to your authentication agent [duplicate]

I'm working on adding ssh authentication to a fresh Linode Ubuntu 12.04LTS deployment. I followed their guide to the letter up to the point where I need to ssh into the box with my now freshly added ...
2
votes
3answers
2k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
4
votes
2answers
1k views

SSH/SFTP connections fails silently on OSX 10.8.2 - ssh-agent issue

I'm trying to login to a remote machine with SSH or SFTP. when I try ssh u-indgo@ssh1.eu1.frbit.com the CLI just won't respond. I get an empty new line, in which I can type characters, but nothing ...
1
vote
1answer
234 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
0
votes
1answer
43 views

seamless ssh with condition

I am looking for a way of seamless ssh in a way that when user does ssh through shell, it will be disallowed (or normal rules apply) but if a process (non-interactive) tries to ssh with the same user ...
0
votes
1answer
176 views

Weird DNS bug - external server resolves to internal IP

I have a server that is hosted by my university. I have root access, but no control over network setup, firewall, etc. This server's DNS resolves to an internal IP here on campus (10.x.x.x), and an ...
3
votes
2answers
663 views

SSH agent forwarding on debian squeeze

Im trying to set up SSH forwarding like this osx > debianA > debianB I can connect to debianA fine, using ssh -A and it has the following env vars when i do: SSH_AGENT_PID=1543 ...
4
votes
1answer
595 views

Accessing SSH_AUTH_SOCK from another non-root user

The Scenario: I am running ssh-agent on my local PC, and all my servers/clients are setup to forward SSH agent auth. I can hop between all my machines using the ssh-agent on my local PC. That works. ...
4
votes
2answers
782 views

Choose identity from ssh-agent by file name

Problem: I have some 20-30 ssh-agent identities. Most servers refuse authentication with Too many failed authentications, as SSH usually won't let me try 20 different keys to log in. At the moment, I ...
1
vote
2answers
930 views

Be able to pull from git without password on login or just run keychain which does it for me

I need to pull from Github all the time and I have a passphrase, but it's a pain, so I typically run... ssh-agent bash ssh-add ~/.ssh/id_rsa <prompt and give passphrase> git pull ... And ...
0
votes
1answer
2k views

ssh-add under cygwin

I'm having trouble with ssh-agent under cygwin. The crazy part is that it was working, but stopped after a reboot one day. Here is an example: sthomas@sthomas-tcg ~ $ keychain ~/.ssh/id_rsa ...
2
votes
1answer
607 views

Any tricks for making sshfs authenticate only on write?

There is seemingly a trick for creating read-only sshfs logins with the read only attribute is enforced by the remote's ~/.ssh/authorized_keys file. You first create a program ~/.ssh/ro-sftp-server ...
1
vote
1answer
420 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
4
votes
3answers
635 views

Allow only specific keys in agent forwarding?

Is it possible to use agent forwarding excluding all keys from being forwarded, except ones specifically stated? Alternatively, are there any ways to specify the order the keys are tried per session? ...
3
votes
1answer
126 views

ssh agent authorization in a detached screen session

I have an ssh script which use ssh key forwarding on a remote system to do thing in even more remote systems. I have to run the script in a screen session so that I can detach from it. But the ...
1
vote
1answer
916 views

sshfs automount with password-enabled ssh key and ssh-agent in ubuntu

I currently set up sshfs automount on ubuntu per this thread. It's nice because of the network up and down scripts. The benefit comes at a cost: it requires passwordless ssh via an ssh key. I was ...