Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Nov 2001 14:37:04 +0200
From:      "Ylitalo Juha . O" <juha.o.ylitalo@nokia.com>
To:        freebsd-questions@freebsd.org
Subject:   ssh agent forwarding with FreeBSD and Linux...
Message-ID:  <20011128143703.D1623@jylitwork.lnx.nokia.com>

next in thread | raw e-mail | index | archive | help
I think I have found funny problem, but I don't know where I should
report about it or if someone would have solution for it. To summarize
it, ssh authentication agent forwarding doesnt seem to work in ssh
protocol 2

To give you complete picture about situation, we probably should start
with more detailed information about environment. It consists one
RedHat Linux 7.1 (openssh 2.9p2) and FreeBSD 4.4-RELEASE (openssh
2.3.0).

In RH box, I've started my session with "exec ssh-agent
gnome-session", I've then added my sshv1 and sshv2 identities into
agent.

[jylitalo@jylitwork jylitalo]$ ssh-add -l 1024
84:c6:5d:ab:21:62:32:84:5d:cd:fd:f9:2b:f3:40:6f
jylitalo@jylitpc.ntc.nokia.com (RSA1) 1024
0d:38:19:99:b6:9a:8e:29:db:5c:5f:0e:df:a3:7c:94 dsa w/o comment (DSA)
[jylitalo@jylitwork jylitalo]$

I have first identity in FreeBSD machines ~/.ssh/authorized_keys and
second one in authorized_keys2 file and I don't have any problems at
doing ssh commands from RH box to FreeBSD.

Things start going wrong, if I first open session with 
"ssh -A FreeBSD" and then try to give "ssh-add -l".
bash-2.05$ ssh-add -l
Could not open a connection to your authentication agent.
bash-2.05$ 
Also I don't seem to have SSH_AUTH_SOCK defined in my environment.

Work-around to this situation is to use "ssh -1 -A FreeBSD" command
for that session, because then "ssh-add -l" will work correctly and I
have SSH_AUTH_SOCK is defined. If someone has found same situation and
found way to fix it (other than editing /etc/ssh/ssh_config in RH
box), I would love to hear about it.

--
Juha Ylitalo       juha.o.ylitalo@nokia.com           <work e-mail>
+358 40 562 6152   http://www.iki.fi/~jylitalo        <public www>
"Some tools are used, because its policy, others because they are good."

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011128143703.D1623>