Re: A question about ssh-agent

2012-02-14 Thread Bob Proulx
Vincent Lefevre wrote: > Bob Proulx wrote: > > This is a problem of opposing goals. One group wants the system to be > > popular and easy to use for novices. The other group wants it to have > > technical excellence. It is exactly with issues such as this that > > they are opposing goals. > > B

Re: A question about ssh-agent

2012-02-07 Thread Chris Davies
Paul E Condon wrote: > Where in the start-up code of a system that is running ssh client is > the ssh-agent started? The (global) configuration option that determines whether or not it is to start is in /etc/X11/Xsession.options. The tool itself is started in /etc/X11/Xsession.d/90x11-common_ssh-

Re: A question about ssh-agent

2012-02-07 Thread Vincent Lefevre
On 2012-02-06 11:03:12 -0700, Bob Proulx wrote: > This is a problem of opposing goals. One group wants the system to be > popular and easy to use for novices. The other group wants it to have > technical excellence. It is exactly with issues such as this that > they are opposing goals. But inst

Re: A question about ssh-agent

2012-02-07 Thread Vincent Lefevre
On 2012-02-06 12:53:03 -0700, Paul E Condon wrote: > On 20120206_121205, Vincent Lefevre wrote: > > On 2012-02-06 11:39:47 +0100, Erwan David wrote: > > > On Mon, Feb 06, 2012 at 11:33:25AM CET, Vincent Lefevre > > > said: > > > > On 2012-02-04 09:35:44 +0100, Sven Joachim wrote: > > > > > Nope,

Re: A question about ssh-agent

2012-02-07 Thread Chris Davies
On 20120206_132412, Bob Proulx wrote: > On the server look in /var/log/auth.log and look at the messages logged > there from the sshd [...] > I often will start up a debugging sshd and connect to it so that all > of the messages will be in the foreground. Paul E Condon replied: > Here is the de

Re: A question about ssh-agent [solved]

2012-02-06 Thread Paul E Condon
On 20120206_132412, Bob Proulx wrote: > Paul E Condon wrote: > > "debug1: Roaming not allowed by server" > > > > Then the process switches over to asking for a password, which I > > am trying to avoid. > > On the server look in /var/log/auth.log and look at the messages ^^

Re: A question about ssh-agent

2012-02-06 Thread Paul E Condon
On 20120206_132412, Bob Proulx wrote: > Paul E Condon wrote: > > "debug1: Roaming not allowed by server" > > > > Then the process switches over to asking for a password, which I > > am trying to avoid. > > On the server look in /var/log/auth.log and look at the messages > logged there from the ss

Re: A question about ssh-agent

2012-02-06 Thread Bob Proulx
Paul E Condon wrote: > "debug1: Roaming not allowed by server" > > Then the process switches over to asking for a password, which I > am trying to avoid. On the server look in /var/log/auth.log and look at the messages logged there from the sshd. Do you see something such as: Authentication r

Re: A question about ssh-agent

2012-02-06 Thread Paul E Condon
On 20120206_110312, Bob Proulx wrote: > Vincent Lefevre wrote: > > Erwan David wrote: > > > Vincent Lefevre said: > > > > But it shouldn't. It should be the user who decides whether he wants > > > > to start ssh-agent (since it is a user process), not the admin. > > > > > > Not necessarily : the u

Re: A question about ssh-agent

2012-02-06 Thread Paul E Condon
On 20120206_121205, Vincent Lefevre wrote: > On 2012-02-06 11:39:47 +0100, Erwan David wrote: > > On Mon, Feb 06, 2012 at 11:33:25AM CET, Vincent Lefevre > > said: > > > On 2012-02-04 09:35:44 +0100, Sven Joachim wrote: > > > > Nope, this is the script that starts the ssh *server*. The agent is

Re: A question about ssh-agent

2012-02-06 Thread Bob Proulx
Vincent Lefevre wrote: > Erwan David wrote: > > Vincent Lefevre said: > > > But it shouldn't. It should be the user who decides whether he wants > > > to start ssh-agent (since it is a user process), not the admin. > > > > Not necessarily : the user uses it or not through ssh-add. > > Yes, but ss

Re: A question about ssh-agent

2012-02-06 Thread Andreas Weber
On 2012-02-04 09:05, Paul E Condon wrote: > It seems that it is not run when I log into a host using ssh or more > exactly its pid is not exported to an ssh login process. Could I add > something to the .profile script? If this is possible, it surely > has been thought of before me and better and w

Re: A question about ssh-agent

2012-02-06 Thread Vincent Lefevre
On 2012-02-06 11:39:47 +0100, Erwan David wrote: > On Mon, Feb 06, 2012 at 11:33:25AM CET, Vincent Lefevre > said: > > On 2012-02-04 09:35:44 +0100, Sven Joachim wrote: > > > Nope, this is the script that starts the ssh *server*. The agent is > > > started in /etc/X11/Xsession.d/90x11-common_ssh

Re: A question about ssh-agent

2012-02-06 Thread Erwan David
On Mon, Feb 06, 2012 at 11:33:25AM CET, Vincent Lefevre said: > On 2012-02-04 09:35:44 +0100, Sven Joachim wrote: > > Nope, this is the script that starts the ssh *server*. The agent is > > started in /etc/X11/Xsession.d/90x11-common_ssh-agent, sourced from > > /etc/X11/Xsession (see Xsession(5)

Re: A question about ssh-agent

2012-02-06 Thread Vincent Lefevre
On 2012-02-04 09:35:44 +0100, Sven Joachim wrote: > Nope, this is the script that starts the ssh *server*. The agent is > started in /etc/X11/Xsession.d/90x11-common_ssh-agent, sourced from > /etc/X11/Xsession (see Xsession(5). But it shouldn't. It should be the user who decides whether he wants

Re: A question about ssh-agent

2012-02-04 Thread Bob Proulx
Andrei Popescu wrote: > Paul E Condon wrote: > > It seems that it is not run when I log into a host using ssh or more > > exactly its pid is not exported to an ssh login process. Could I add > > something to the .profile script? > > Maybe 'ForwardAgent' is what you are looking for. See ssh(1) and

Re: A question about ssh-agent

2012-02-04 Thread Paul E Condon
On 20120204_093544, Sven Joachim wrote: > On 2012-02-04 09:09 +0100, Scott Ferguson wrote: > > > On 04/02/12 19:05, Paul E Condon wrote: > >> > >> Where in the start-up code of a system that is running ssh client is > >> the ssh-agent started? It has got to be early in the process, but > >> where

Re: A question about ssh-agent

2012-02-04 Thread Camaleón
On Sat, 04 Feb 2012 01:05:47 -0700, Paul E Condon wrote: > Some might think I have no business wanting to know the answer to this > question, but bare with me: > > Where in the start-up code of a system that is running ssh client is the > ssh-agent started? It has got to be early in the process,

Re: A question about ssh-agent

2012-02-04 Thread Andrei Popescu
On Sb, 04 feb 12, 01:05:47, Paul E Condon wrote: > It seems that it is not run when I log into a host using ssh or more > exactly its pid is not exported to an ssh login process. Could I add > something to the .profile script? Maybe 'ForwardAgent' is what you are looking for. See ssh(1) and ssh

Re: A question about ssh-agent

2012-02-04 Thread Scott Ferguson
On 04/02/12 19:35, Sven Joachim wrote: > On 2012-02-04 09:09 +0100, Scott Ferguson wrote: > >> On 04/02/12 19:05, Paul E Condon wrote: >>> >>> Where in the start-up code of a system that is running ssh client is >>> the ssh-agent started? >>> It seems that it is not run when I log into a host

Re: A question about ssh-agent

2012-02-04 Thread Sven Joachim
On 2012-02-04 09:09 +0100, Scott Ferguson wrote: > On 04/02/12 19:05, Paul E Condon wrote: >> >> Where in the start-up code of a system that is running ssh client is >> the ssh-agent started? It has got to be early in the process, but >> where? And what exactly is done? Should I be able to see i

Re: A question about ssh-agent

2012-02-04 Thread Scott Ferguson
On 04/02/12 19:05, Paul E Condon wrote: > Some might think I have no business wanting to know the answer > to this question, but >bare with me: Blink Blink :-/ (bear? I really hope *that*'s what you're requesting) > > Where in the start-up code of a system that is running ssh client is > th

A question about ssh-agent

2012-02-04 Thread Paul E Condon
Some might think I have no business wanting to know the answer to this question, but bare with me: Where in the start-up code of a system that is running ssh client is the ssh-agent started? It has got to be early in the process, but where? And what exactly is done? Should I be able to see it in