On Thu, Nov 06, 2008 at 10:55:37AM -0800, Enrico Perla wrote: > 2008/11/6 Chris Ridd <chrisridd at mac.com> > > I believe so - ssh -o PreferredAuthentications=password ... - but it > > would be nice if I could get things behaving like it used to pre-99.
Use -o PreferredAuthentications=keyboard-interactive,password, not =password. > Sure the ssh option is that one, my question was more if there is a way to > instrument the keyring to not attempt key authentication on specific hosts > (or if it is even its duty) > > I guess that being able to pick all the available keys is a desired > feature... OK, let's try this: % echo $SSH_AUTH_SOCK % echo $SSH_AGENT_PID % pgrep ssh-agent % ptree 1|while read pid cmd args % do % pfiles $pid 2>/dev/null |grep $SSH_AUTH_SOCK > /dev/null && echo FOUND: $pid $cmd $args % done Is that ssh-agent? If so please post ~/.ssh/config. Perhaps you've added Identity parameters naming all your keys recently. Also, I suspect your keys are not passphrase-protected. I wouldn't recommend that for any important keys, or even at all, particularly if your home directory is mounted remotely. Nico --
