0

I would like to be able to use my local credentials in a remote session without Agent forwarding if possible. The reasons:

  • Agent forwarding has security issues (port accessible to remote root users)
  • I am in a terminal session and ssh-askpass requires X-windows
  • I need to be able to execute a command on a remote host (HOST_A) that uses SSH transport to another host (HOST_B)
  • I don't want to grant HOST_A access to HOST_B

It seems that ProxyCommand effectively has this ability (using credentials without Agent forwarding), but it also seems it is only to be used for jumping to other hosts, whereas I'd like the feature in a normal shell on HOST_A (or, failing that, a single command on HOST_A).

I guess that ProxyCommand is doing something cunning in the background that I can not emulate via other SSH options, but would appreciate any advice about how I might be able to achieve this outcome.

Improve this question
6
  • What do you expect to do with your ssh keys other than connect to a host?
    – Michael Hampton
    Jul 25, 2020 at 17:06
  • As I said in the question, use a command that supports SSH transport to connect from HOST_A to HOST_B (trivial examples might be Git, BorgBackup, SCP etc; specifically I do not want to create a shell session on HOST_B).
    – RabidMutant
    Jul 25, 2020 at 17:11
  • OK, you should connect directly to HOST_B.
    – Michael Hampton
    Jul 25, 2020 at 17:14
  • No, I want a command running on HOST_A to connect to HOST_B, using MY credentials.
    – RabidMutant
    Jul 25, 2020 at 17:14
  • Well, now you're back to agent forwarding. Or perhaps that command should have its own credentials.
    – Michael Hampton
    Jul 25, 2020 at 17:18

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .