You are not logged in.

#1 2014-09-07 21:27:27

Kopkins
Member
Registered: 2012-07-01
Posts: 189

ssh-agent admitting failure

So I used to use ssh-keys for all my remote logins for increased security and disabled password logins. But Lately I have had trouble getting ssh-keys to work properly.

All of the directories and files have the correct permissions.

Starting with trying to ssh somewhere where a key is required.

...
Offering RSA public key: /home/kyle/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Server accepts key: pkalg ssh-rsa blen 279
debug2: input_userauth_pk_ok: fp <FINGERPRINT>
debug3: sign_and_send_pubkey: RSA <FINGERPRINT>
Agent admitted failure to sign using the key.
...

Without debug it would go like this:

$ ssh me@host.net
Agent admitted failure to sign using the key.
Password for me@host.net: 

I can fix that with this

exec ssh-agent zsh
$ ssh me@host.net
Enter passphrase for key '/home/user/.ssh/id_rsa': 

Which works, but I would rather not have to type that command and the passphrase every time I was to ssh.

So I try 'ssh-add' which asks for the passphrase. Then I can ssh into any of the machines I need without entering all those commands. But as soon as I open a new terminal or reboot I have to enter everything again.

What could be the issue that requires the agent to be started that way every time?

Thanks,

Kyle

Offline

#2 2014-09-08 04:44:18

anatolik
Developer
Registered: 2012-09-27
Posts: 458

Re: ssh-agent admitting failure

The fact that "ssh-agent zsh" works makes me believe your current terminal session sees incorrect ssh-agent.

Do you have only one ssh-agent instance running?

ps ax | grep ssh-agent

Show us content of the SSH_* envvars

env | grep SSH

Make sure that socket file pointed by $SSH_AUTH_SOCK is valid and belongs to ssh-agent process.

Do you have keys added to the agent?

ssh-add -l

.

UPD: Did you change the key recently? Could it be that ssh-add caches your old identity?

Last edited by anatolik (2014-09-08 04:47:11)


Read it before posting http://www.catb.org/esr/faqs/smart-questions.html
Ruby gems repository done right https://bbs.archlinux.org/viewtopic.php?id=182729
Fast initramfs generator with security in mind https://wiki.archlinux.org/index.php/Booster

Offline

Board footer

Powered by FluxBB