And, just to end this: The less verbose thing to do would be to include something like this in /etc/sudoers: Defaults env_keep="SSH_AUTH_SOCK" With that, the following works: sudo ssh <user>@C ls -la -i On Sat, 2008-06-21 at 12:16 +0200, Iwan Vosloo wrote: > Well, here is a bit of a verbose solution to my problem. > > Agent-forwarding is controlled by the SSS_AUTH_SOCK variable, and this > needs to be passed through to sudo: > > sudo env SSH_AUTH_SOCK=$SSH_AUTH_SOCK ssh <user>@C ls -la > > I suppose one can do something similar in sudoers to ensure this > variable is always passed through. > > -i > >