[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssh-bugs
Subject:    [Bug 2066] New: ssh tries the keys proposed by the agent before those passed with -i
From:       bugzilla-daemon () mindrot ! org
Date:       2013-01-29 1:30:40
Message-ID: bug-2066-705 () https ! bugzilla ! mindrot ! org/
[Download RAW message or body]

https://bugzilla.mindrot.org/show_bug.cgi?id=2066

            Bug ID: 2066
           Summary: ssh tries the keys proposed by the agent before those
                    passed with -i
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 6.0p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs@mindrot.org
          Reporter: pabs3@bonedaddy.net

When I have IdentityFile set in ~/.ssh/config and multiple ssh keys
added to my ssh-agent, ssh -i ... or ssh -o 'IdentityFile ....' tries
keys from the ssh-agent before the keys I specified on the
command-line. The key I passed on the command-line is a passwordless
key that is command-limited on the remote end (limited to running
git-upload-pack so I can git clone/fetch over ssh without a
passphrase). One of the other keys in my ssh-agent is a
password-protected, confirmation requiring key that is
not-command-limited on the remote end. For now I'm working around this
by unsetting SSH_AUTH_SOCK whenever I want to use the passwordless
command-limited key.

There is another use-case listed in this Debian bug:
http://bugs.debian.org/513235

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[prev in list] [next in list] [prev in thread] [next in thread]