tag #76 moreinfo
thanks

HI Reinhard,

On Do 06 Dez 2012 09:13:11 CET Reinhard Tartler wrote:

Package: pyhoca-gui
Version: 0.2.0.4-0~789~precise1

It would be nice if pyhoca-gui could just reuse my local sshagent,
which happens to be gnome-keyring-daemon.

There are several reasons for not using gnome-keyring as ssh-agent, see:
http://dtek.net/blog/how-stop-gnome-keyring-clobbering-opensshs-ssh-agent-ubuntu-1204

The main problem you have with gnome-keyring (at least on squeeze, untested on wheezy) is this:

The below command sequence should create an SSH agent forwarding chain back to the local-machine host:

 local-machine$ ssh -A user-1@server-1
 server-1$ ssh -A user-2@server-2
 server-2$ ssh -A user-3@server-3

This works flawlessly with ssh-agent, but fails with gnome-keyring. gnome-keyring simple loads the local keys (by finding them under their default names). That's it.

Expected behaviour would be: mix auth info from the forwarded ssh-agent (running on local-machine) with SSH keys found in .ssh on the local-system.

Are you affected by this restriction of GNOME keyring?

Maybe time to disable SSH agent functionality in GNOME-keyring?

Mike



--

DAS-NETZWERKTEAM
mike gabriel, rothenstein 5, 24214 neudorf-bornstein
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: [email protected], http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

Attachment: pgpeIUaRpW5G9.pgp
Description: Digitale PGP-Unterschrift

_______________________________________________
X2Go-Dev mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/x2go-dev

Reply via email to