https://bugzilla.mindrot.org/show_bug.cgi?id=2066
Bug ID: 2066
Summary: ssh tries the keys proposed by the agent before those
passed with -i
Classification: Unclassified
Product: Portable OpenSSH
Version: 6.0p1
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P5
Component: ssh
Assignee: [email protected]
Reporter: [email protected]
When I have IdentityFile set in ~/.ssh/config and multiple ssh keys
added to my ssh-agent, ssh -i ... or ssh -o 'IdentityFile ....' tries
keys from the ssh-agent before the keys I specified on the
command-line. The key I passed on the command-line is a passwordless
key that is command-limited on the remote end (limited to running
git-upload-pack so I can git clone/fetch over ssh without a
passphrase). One of the other keys in my ssh-agent is a
password-protected, confirmation requiring key that is
not-command-limited on the remote end. For now I'm working around this
by unsetting SSH_AUTH_SOCK whenever I want to use the passwordless
command-limited key.
There is another use-case listed in this Debian bug:
http://bugs.debian.org/513235
--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
