[X2Go-Dev] Bug#76: Fails to use my local SSH agent

[Mike Gabriel]

tag #76 moreinfo
thanks

HI Reinhard,

On Do 06 Dez 2012 09:13:11 CET Reinhard Tartler wrote:

> Package: pyhoca-gui
> Version: 0.2.0.4-0~789~precise1
>
> It would be nice if pyhoca-gui could just reuse my local sshagent,
> which happens to be gnome-keyring-daemon.

There are several reasons for not using gnome-keyring as ssh-agent, see:
http://dtek.net/blog/how-stop-gnome-keyring-clobbering-opensshs-ssh-agent-ubuntu-1204

The main problem you have with gnome-keyring (at least on squeeze,  
untested on wheezy) is this:

The below command sequence should create an SSH agent forwarding chain  
back to the local-machine host:

  local-machine$ ssh -A user-1 at server-1
  server-1$ ssh -A user-2 at server-2
  server-2$ ssh -A user-3 at server-3

This works flawlessly with ssh-agent, but fails with gnome-keyring.  
gnome-keyring simple loads the local keys (by finding them under their  
default names). That's it.

Expected behaviour would be: mix auth info from the forwarded  
ssh-agent (running on local-machine) with SSH keys found in .ssh on  
the local-system.

Are you affected by this restriction of GNOME keyring?

Maybe time to disable SSH agent functionality in GNOME-keyring?

Mike



-- 

DAS-NETZWERKTEAM
mike gabriel, rothenstein 5, 24214 neudorf-bornstein
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20121206/5f3c69ea/attachment.pgp>