Alexander Hall wrote: > Is not your "problem" just that ssh, after trying the key supplied with > -i, tries any key loaded into ssh-agent?
> What if you try ``ssh-add -D'' before trying to login with the invalid keys? I had tried that. > Otherwise, try adding -v to see what happens and what keys are really > used to log in. That made the difference. It turns out that the client gives no warning when the agent fails over to another key. I was looking at sshd in debug, but that was not giving details about the client. I should have tried -v on the client before writing. Thanks. -Lars

