openssh unix dev - Jan 2014 - Keys from -i should have precedence over agent keys

Hi,

I believe it would make more sense if,
when specifying a key with -i, that key (or keys) should be tried prior to
the keys in the agent.

Otherwise, if I have many keys in my agent, the server will kick me out. I
can see no situation where one would like to use agent keys instead of the
ones explicitly stated.

Do you agree?

The workaround is of course to set the IdentitiesOnly option.

Best regards
(off list, please include me in reply)
-- 
Max Thoursie

On Tue, 21 Jan 2014, Max Thoursie wrote:
> Hi,
> 
> I believe it would make more sense if,
> when specifying a key with -i, that key (or keys) should be tried prior to
> the keys in the agent.
> 
> Otherwise, if I have many keys in my agent, the server will kick me out. I
> can see no situation where one would like to use agent keys instead of the
> ones explicitly stated.
> 
> Do you agree?
Yes, and that is what the code is supposed to do already. See
sshconnect2.c:pubkey_prepare()

-d