(please CC me in replies, I'm not subscribed) I do have the following problem: When adding more than 7 keys to ssh-agent (openssh-3.7.1p2/Linux 2.4) only the first 7 keys work. All other keys fail when trying to set up a ssh connection with: Received disconnect from *.*.*.*: 2: Too many authentication failures for ***** Note: *=censored All keys work when added to ssh-agent as one of the first seven keys, none of the key works when added as the 8th or any later key to ssh-agent. All connections are V2, the keys are 1024 and 2048 bit RSA keys. Please let me know if further information is required. -- Andreas Steinmetz
Andreas Steinmetz wrote:> I do have the following problem: > When adding more than 7 keys to ssh-agent (openssh-3.7.1p2/Linux 2.4) > only the first 7 keys work. All other keys fail when trying to set up a > ssh connection with: > > Received disconnect from *.*.*.*: 2: Too many authentication failures > for *****sshd currently has a hard-coded limit of 6 authentication attempts before disconnecting. There is an open enhancement request (with patch) to make this user-settable (MaxAuthTries): http://bugzilla.mindrot.org/show_bug.cgi?id=561 -- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.
use IdentityFile in ssh_config. ssh will try these keys first. On Tue, Dec 02, 2003 at 11:26:59PM +0100, Andreas Steinmetz wrote:> (please CC me in replies, I'm not subscribed) > > I do have the following problem: > When adding more than 7 keys to ssh-agent (openssh-3.7.1p2/Linux 2.4) > only the first 7 keys work. All other keys fail when trying to set up a > ssh connection with: > > Received disconnect from *.*.*.*: 2: Too many authentication failures > for ***** > > Note: *=censored > > All keys work when added to ssh-agent as one of the first seven keys, > none of the key works when added as the 8th or any later key to ssh-agent. > > All connections are V2, the keys are 1024 and 2048 bit RSA keys. > Please let me know if further information is required. > -- > Andreas Steinmetz > > _______________________________________________ > openssh-unix-dev mailing list > openssh-unix-dev at mindrot.org > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
Reasonably Related Threads
- [Bug 3153] New: Prefer user specified keys to avoid the agent overloading MaxAuthTries before even trying the key that was specified
- (rfc) too many keys, usecase?
- [Bug 684] ssh cannot access keys stored in agent
- How to use ssh -i with a key from ssh-agent rather than from a file?
- [Bug 2066] New: ssh tries the keys proposed by the agent before those passed with -i