openssh unix dev - Jan 2024 - How to get "Enter passphrase" on command line rather than GUI pop-up?

Chris Green:
> Setting SSH_ASKPASS_REQUIRE=never in the environment on my xubuntu
> 23.10 system doesn't seem to work.  I have set it:-
> 
>     chris$ env | grep SSH
>     SSH_AUTH_SOCK=/run/user/1000/keyring/ssh
>     SSH_ASKPASS_REQUIRE=never
What component is actually calling ssh-askpass?

Setting SSH_ASKPASS_REQUIRE=never has no effect for me either, but
that's because...

Jan  1 21:26:12 lorvorc ssh-agent[76961]: error: Fssh_notify_start:
exec(/usr/local/bin/ssh-askpass): No such file or directory

... ssh-askpass is called by a previously started ssh-agent that
doesn't know about the new environment variable.  The fact that
you have SSH_AUTH_SOCK set suggests that authentication requests
are also forwarded to an agent in your setup.

-- 
Christian "naddy" Weisgerber                          naddy at
mips.inka.de

On Mon, 1 Jan 2024, Christian Weisgerber wrote:
> Chris Green:
> 
> > Setting SSH_ASKPASS_REQUIRE=never in the environment on my xubuntu
> > 23.10 system doesn't seem to work.  I have set it:-
> > 
> >     chris$ env | grep SSH
> >     SSH_AUTH_SOCK=/run/user/1000/keyring/ssh
> >     SSH_ASKPASS_REQUIRE=never
> 
> What component is actually calling ssh-askpass?
> 
> Setting SSH_ASKPASS_REQUIRE=never has no effect for me either, but
> that's because...
> 
> Jan  1 21:26:12 lorvorc ssh-agent[76961]: error: Fssh_notify_start:
> exec(/usr/local/bin/ssh-askpass): No such file or directory
> 
> ... ssh-askpass is called by a previously started ssh-agent that
> doesn't know about the new environment variable.  The fact that
> you have SSH_AUTH_SOCK set suggests that authentication requests
> are also forwarded to an agent in your setup.
yeah, some desktop enviornments implicitly start an agent. Often this
isn't actually ssh-agent, but something else that speaks the agent
protocol. Either way, they are a pain to configure because the
configuration is usually hidden from the user and often difficult to
disable.

Generally I find it easier to override them.

-d