openssh unix dev - Aug 2001 - Troubleshooting ssh-agent forwarding w/ v2 protocols

OK.  I've had a few replies to my earlier question about auth agent
forwarding that indicate that it is currently supported.  So now I'm
confused
as to why it is not working for me.  I'm trying to chain between servers.
With v1 I could load my key into the ssh-agent on my workstation (a) and ssh
to server b and ssh from there to server c, all without typing a
passphrase/password.  Now I can go from a to b, but if I ssh to c I am
prompted for my password.

On my workstation, I have these lines in my /usr/local/etc/ssh_config:

Host *
    ForwardAgent yes
    ForwardX11 no
    <snip>

The config looks the same on b.

I have upgraded all three machines to OpenSSH 2.9p2.

Would it be worthwhile to post debugging output from either the client or the
server?

Thanks,
Ben

-- 
Ben Beuchler                                           There is no spoon.
insyte at emt-p.org                                            -- The Matrix

Circa 2001-Aug-27 15:51:27 -0500 dixit Ben Beuchler:

: OK.  I've had a few replies to my earlier question about auth agent
: forwarding that indicate that it is currently supported.  So now I'm
: confused as to why it is not working for me. [...]
  [...]
: I have upgraded all three machines to OpenSSH 2.9p2.
: 
: Would it be worthwhile to post debugging output from either the
: client or the server?

Probably.  At the very least, i'd recommend trying it yourself, twice:
once with 'ssh -A' to explicitly enable agent forwarding, and once with
plain 'ssh', to see if there's a difference.

Also, do 'ssh-agent -V' to make certain the ssh-agent on your PATH is
the one from 2.9p2.  You may also need to log out and log back in again
(or restart ssh-agent) in order to be certain you're running the newly
installed ssh-agent.

-- 
jim knoble | jmknoble at pobox.com   | http://www.pobox.com/~jmknoble/
(GnuPG fingerprint: 31C4:8AAC:F24E:A70C:4000::BBF4:289F:EAA8:1381:1491)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 262 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20010827/48b92b23/attachment.bin