On Sat, Oct 08, 2016 at 04:44:16PM -0400, Predrag Punosevac wrote:
> I just want to give an update to this thread. I got lots of replays off
> the list as well but not the answer I was looking for
> 
> For now Iexperimented with the single   
> 
> eval `ssh-agent -t 60`
> 
> in my .profile file 

with that you start a new ssh-agent with every ssh session. after some
time you will have a lot of ssh-agent processes on your box.

> 
> and
> 
> AddKeysToAgent yes
> 
> in my 
> 
> ~/.ssh/config 
> 
> file. Everything works as I wont but there is big caveat. ssh-agent
> doesn't get killed after I log out so it looks like this would be very
> easy to abuse. I could kill ssh-agent after some time let say 10
> minutes with the cron job. Reading again through ssh-agent man pages I
> don't see expiration switch but it might be somehow possible to tie
> ssh-agent proce to the PID  of current ssh login. I actaully feel
> unconfortable leaving ssh-agent -t 60 in .profile until I learn how to
> kill it automatically upon log out. 

Maybe ssh agent forwarding would be better for you (ssh -A).

> 
> Predrag

Reply via email to