Re: 2.1.120 and ssh-agent auth. forwarding

Lutz Pressler (Lutz.Pressler@SerNet.DE)
Thu, 10 Sep 1998 22:48:28 +0200 (MEST)


Hello,

On Thu, 10 Sep 1998 kuznet@ms2.inr.ac.ru wrote:
> I did not react only because I still did not read manual
> on all this ssh-agent, ssh-add etc. 8)
>
> Could you give EXACT sequence of actions resulting
> in this weirdness? It would save some time.
Sure:

System A is running Linux kernel 2.1.120+, with earlier versions this
problem does not appear. Systems B and C can be different OSes (tested
with Linux, 2.0.x though, and AIX) running sshd (versions 1.2.17 ..
1.2.25). I haven't verified if an intermediate Linux 2.1.120+ system
and other OS running ssh-agent leads to the same effect.

user@A> ssh-agent sh (or equivalent ssh-agent start)
user-with_agent@A> ssh-add (passphrase has to be input)
user-with_agent@A> ssh B
user@B> doing some stuff on local system
user@B> exit
user-with_agent@A> ----> no problem

but:

user@A> ssh-agent sh (or equivalent ssh-agent start)
user-with_agent@A> ssh-add (passphrase has to be input)
user-with_agent@A> ssh B
user@B> ssh C
user@C> doing some stuff there
user@C> exit (no problem to logout here, but)
user@B> netstat -a shows open agent-socket-* unix sockets here

unix 1 [ ACC ] STREAM LISTENING 1087861 agent-socket-26159
^^^--- this is normal for an ssh conn. with ssh-agent running on other side
unix 1 [ ] STREAM 1087881 agent-socket-26159
unix 1 [ ] STREAM 1087883 agent-socket-26159
^^^--- these are only visible while or after the connection to C is
established if A runs 2.1.120+
user@B> exit
Waiting for forwarded connections to terminate...
The following connections are open:
Forwarded agent connection
Forwarded agent connection

Lutz

--
  _              |  Lutz Pressler          |  Tel: ++49-551-3700002
 |_     |\ |     |  Service Network GmbH   |  FAX: ++49-551-3700009
 ._|ER  | \|ET   |  Hannah-Vogt-Strasse 1  |   mailto:lp@SerNet.DE
Service Network  |  D-37085 Goettingen     |  http://www.SerNet.DE/

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/faq.html