-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Again,

On 24/06/16 15:21, Giuseppe Bilotta wrote:
> OK, I think I found a solution!

Glad to hear.

> 
> When I checked the permissions of my .ssh folder and all the files
> within, I noticed there were a lot of leftover agent-* files in it. I
> killed my manually-started ssh-agent session, removed all the leftover
> files, logged out, and now the agent starts correctly when I log in.
> 
> So the problem is that one of the leftover files prevented the agent
> from starting.

This is not a problem, this mechanism is meant to allow several sessions
to use the same agent.
What is not normal is that the flag file was not removed: I suspect an accident
and/or any confusions as it happens at migration time.

> 
> May I suggest adding a few more debug outputs centered around starting
> up the agent? I don't know how it's done in pam_ssh, but if it does
> some checks before then actually printing on debug "checking for
> running agents" and maybe "found agent from XXXXX file, not starting"?

I am agree that the DEBUG message policy must be revisited.

> 
> This would at least hint at the reason why the agent is not being started.
> 
> (Bonus points: making sure that the agent is actually running and not
> just some lefover file?)

The leftover file is a flag file (see above).
How do you suggest to decide whether or not an agent was indeed launched by 
pam_ssh but not any other process ?
> 
> (Anyway, the issue is solved for me; maybe demote it to wishlist for
> the improved checks?)

I guess that we can close it.

Note that you may want to launch the pam_tmpdir module before pam_ssh as 
pam_ssh honours TMPDIR.

> 
> Thanks a lot for your time,
> 

Cheers,
Jerome


- -- 
Jerome BENOIT | calculus+at-rezozer^dot*net
https://qa.debian.org/developer.php?login=calcu...@rezozer.net
AE28 AE15 710D FF1D 87E5  A762 3F92 19A6 7F36 C68B
-----BEGIN PGP SIGNATURE-----
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=
=wxBw
-----END PGP SIGNATURE-----

Reply via email to