search for: agentforwarding

Hi, I can disable agent-forwarding for any given key by prefixing it with "no-agent-forwarding", but it seems there's no global sshd_config setting for this (ie no "AgentForwarding [yes|no]"). Is this on purpose? If so, what's the rationale? -Jan -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 186 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/openssh-unix-d...

...ld forward a Unix-domain socket without specifying the full path name of the socket on the remote end. There are couple of use-cases: - gpg-agent forwarding uses this syntax: RemoteForward /home/<user>/.gnupg/S.gpg-agent /home/<user>/.gnupg/S.gpg-agent.extra https://wiki.gnupg.org/AgentForwarding - smart card forwarding with p11-kit uses /run/user/$UID/p11-kit https://fosdem.org/2017/schedule/event/smartcard_forwarding/ On the mailing list, it was suggested to call a remote script to determine the path instead of letting sshd resolve the path. However, although the approach could be mo...

Is there any way to disable the authentication agent globally? I'm not quite sure I understand it's purpose. Here is some background info: workstation: Key pair (dsa). host1: No key pair. No authorized_keys. host2: Has my workstation's key in authorized_keys. I ssh to host1 from my workstation. I ssh to host2 from host1. I am asked for a password. Good. I ssh to host2 from my

...re still accessing it. There are of course workarounds like creating that directory before the agent forwarding connection but they are workarounds and I'd like to have this working smoothly. The gpg-agent forwarding is an awesome feature for us. ( I documented it under https://wiki.gnupg.org/AgentForwarding ) In my opinion OpenSSH should create the parent directories of RemoteForwarded files if possible. Maybe as a configuration option? Do you agree? Or do you think that some other software component in this setup is behaving wrongly? Regards, Andre -- Andre Heinecke | ++49-541-335083-262 | ht...