openssh unix dev - Oct 2023 - ssh-agent hides sk "confirm user presence" message

Jochen Bern:
> *Which* ssh-askpass, OpenBSD's (with the "LEDs" underneath
and "only" the
> usual range of X11 options), GNOME's (which doesn't react to
"--help", "-h",
> or "-?", and doesn't seem to have a manpage, either), or
KDE's (with a
> selection of possible options, including "--help",
"--author", "--license",
> and Qt-specific ones)?
> 
> As far as I know, they would all require a (in the OP's use case,
*second*)
> user interaction to close them again,
No, ssh-askpass closes automatically when you touch the authenticator.
This should be independent of the ssh-askpass implementation: After
reading the signature from the authenticator, ssh-agent sends a
SIGTERM to the ssh-askpass process.

-- 
Christian "naddy" Weisgerber                          naddy at
mips.inka.de

Thanks everyone for the patience and the tips. I installed x11-ssh-askpass;
ssh-agent found it automatically and everything works as expected.

It would be nice to know how it is implemented, i.e. how the askpass dialog
knows that user presence is being requested. Ideally I'd rather have
notifications like this appear via dunst, i.e. have an SSH_ASKPASS script that
detects whether user presence is being detected and in that case use notify-send
before falling back to x11-ssh-askpass. I guess I may have to poke at some
x11-ssh-askpass and ssh-agent sources some time to see what the interaction
looks like under the hood.

Cheers,

Tim