On Wed, Jan 03, 2024 at 10:04:20AM +0000, Stuart Henderson wrote:
> On 2024/01/02 09:51, Chris Green wrote:
> > I think I have it! I need to unset SSH_AUTH_SOCK, that's all that's
> > needed. See:-
> >
> > chris$ ssh -i backup_id_rsa backup
> > [here the pop-up appears and I cancel it]
> > sign_and_send_pubkey: signing failed for RSA "backup_id_rsa" from
> > agent: agent refused operation
> > chris@backup's password:
> >
> > chris$ env | grep SSH
> > SSH_AUTH_SOCK=/run/user/1000/keyring/ssh
> > SSH_ASKPASS_REQUIRE=never
> > chris$ unset SSH_AUTH_SOCK
> > chris$ ssh -i backup_id_rsa backup
> > Enter passphrase for key 'backup_id_rsa':
> > chris@backup$
> >
> > So the SSH_ASKPASS etc. are irrelevant for my set-up. I thought I'd
> > tried unsetting SSH_AUTH_SOCK before but obviously I hadn't, I guess
> > the need to specify the key file is a result of not having that but
> > it's not a problem for me really.
>
> You might like to try something like this in .ssh/config
>
> Host backup
> IdentityAgent none
> IdentityFile ~/backup_id_rsa
Yes, thank you, I've already done it:-
#
#
# backup, use public-key authentication
#
Host backup
IdentityFile ~/.ssh/backup_id_rsa
IdentityAgent none
:-)
Thank you for this and all the other responses here, I'm now fairly
sorted (and understand ssh-agent better than I did!).
--
Chris Green
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
