Re: ssh forward agent

2025-06-03 Thread Todd Zullinger
Chris Adams wrote: > Once upon a time, Tim said: >> Bob Marčan: >>> BTW, it's "sudo -i" >> >> No, it's not. When I said I typed "su -" I meant that I typed "su -". >> >> I'm not sudo-ing when I'm doing a plethora of things, I've become root >> with the "su" command, and using "su -" with the ad

Re: ssh forward agent

2025-06-03 Thread Tim via users
Bob Marčan: >>> BTW, it's "sudo -i" Tim: >> No, it's not. When I said I typed "su -" I meant that I typed "su -". Chris Adams: > Which is what "sudo -i" does, without the superfluous "su -". And you > can use "sudo -s" instead of "sudo su" too. > > I don't know where the idea that you need to

Re: ssh forward agent

2025-06-03 Thread Chris Adams
Once upon a time, Tim said: > Bob Marčan: > > BTW, it's "sudo -i" > > No, it's not. When I said I typed "su -" I meant that I typed "su -". > > I'm not sudo-ing when I'm doing a plethora of things, I've become root > with the "su" command, and using "su -" with the added dash I'm in > their env

Re: ssh forward agent

2025-06-03 Thread Tim via users
Tim: Having said that, on my system where I am the sole user, I'll only use sudo if I know I'm doing just one thing. If I have to do a series of things, I will "su -" and do them all as root. It's just too tedious Bob Marčan: > BTW, it's "sudo -i" No, it's not. When I said I typ

Re: ssh forward agent

2025-06-03 Thread Patrick O'Callaghan
On Tue, 2025-06-03 at 13:06 +0100, Patrick O'Callaghan wrote: > > > > Having said that, on my system where I am the sole user, I'll only use > > > > sudo if I know I'm doing just one thing.  If I have to do a series of > > > > things, I will "su -" and do them all as root.  It's just too tedious >

Re: ssh forward agent

2025-06-03 Thread Bob Marčan via users
On Wed, 04 Jun 2025 01:33:40 +0930 "Tim via users" wrote: > poc: > >> "sudo bash" will not run the login resources. > > Bob Marčan: > > That's exactly what I want. > > "su" without the dash after it will do that, too. But horses for > courses applies (*you* do what *you* need). > True.

Re: ssh forward agent

2025-06-03 Thread Tim via users
poc: >> "sudo bash" will not run the login resources. Bob Marčan: > That's exactly what I want. "su" without the dash after it will do that, too. But horses for courses applies (*you* do what *you* need). -- uname -rsvp Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 202

Re: ssh forward agent

2025-06-03 Thread Tim via users
Tim: >>> Having said that, on my system where I am the sole user, I'll only use >>> sudo if I know I'm doing just one thing. If I have to do a series of >>> things, I will "su -" and do them all as root. It's just too tedious >>> to do "sudo some-command" over and over. poc: >> Exactly. Bob M

Re: ssh forward agent

2025-06-03 Thread Go Canes
On Tue, Jun 3, 2025 at 8:00 AM Frederic Muller wrote: > Any idea why this is happening? I check the authorized_keys and it's > there, and it's the same as the /home/user/.ssh/authorized_keys and the > key.pub for that user on my local machine. Verify the permissions on the relevant files *and* di

Re: ssh forward agent

2025-06-03 Thread Francis . Montagnac
On Tue, 03 Jun 2025 19:00:06 +0700 Frederic Muller wrote: > Jun 3 18:54:09 host sudo[2371]: pam_ssh_agent_auth: Failed > Authentication: `user' as `user' using /etc/security/authorized_keys > Any idea why this is happening? I check the authorized_keys and it's > there, and it's the same as the

Re: ssh forward agent

2025-06-03 Thread Bob Marčan via users
On Tue, 03 Jun 2025 13:06:18 +0100 "Patrick O'Callaghan" wrote: > On Tue, 2025-06-03 at 10:45 +, Bob Marčan via users wrote: > > > > Having said that, on my system where I am the sole user, I'll only use > > > > sudo if I know I'm doing just one thing.  If I have to do a series of > > > > thi

Re: ssh forward agent

2025-06-03 Thread Frederic Muller
On 03/06/2025 13:15, francis.montag...@inria.fr wrote: Hi. On Mon, 02 Jun 2025 22:45:48 +0700 Frederic Muller wrote: On 02/06/2025 21:45, francis.montag...@inria.fr wrote: AFAIK sudo cannot be configured to authenticate with SSH keys. of course it can. Effectively, a search shows that this i

Re: ssh forward agent

2025-06-03 Thread Patrick O'Callaghan
On Tue, 2025-06-03 at 10:45 +, Bob Marčan via users wrote: > > > Having said that, on my system where I am the sole user, I'll only use > > > sudo if I know I'm doing just one thing.  If I have to do a series of > > > things, I will "su -" and do them all as root.  It's just too tedious BTW, i

Re: ssh forward agent

2025-06-03 Thread Frederic Muller
On 03/06/2025 18:32, Frederic Muller wrote: debugging... So I am getting this for the /var/log/auth.log [...] Jun  3 18:54:09 airport1 sudo[2371]: pam_ssh_agent_auth: trying public key file /etc/security/authorized_keys Jun  3 18:54:09 host sudo[2371]: pam_ssh_agent_auth: auth_secure_filenam

Re: ssh forward agent

2025-06-03 Thread Bob Marčan via users
On Tue, 03 Jun 2025 10:43:37 +0100 "Patrick O'Callaghan" wrote: > On Tue, 2025-06-03 at 15:07 +0930, Tim via users wrote: > > On Mon, 2025-06-02 at 11:50 -0500, Ranjan Maitra via users wrote: > > > passwordless sudo seems quite risky to me (and seems to defeat the > > > purpose of sudo). > >

Re: ssh forward agent

2025-06-03 Thread Patrick O'Callaghan
On Tue, 2025-06-03 at 15:07 +0930, Tim via users wrote: > On Mon, 2025-06-02 at 11:50 -0500, Ranjan Maitra via users wrote: > > passwordless sudo seems quite risky to me (and seems to defeat the > > purpose of sudo). > > [...] > Having said that, on my system where I am the sole user, I'll only