[Bug 2824] New: Add a configuration option / hook that will enable running a shell command / script right before connecting
bugzilla-daemon at bugzilla.mindrot.org
bugzilla-daemon at bugzilla.mindrot.org
Wed Jan 24 02:14:31 AEDT 2018
https://bugzilla.mindrot.org/show_bug.cgi?id=2824
Bug ID: 2824
Summary: Add a configuration option / hook that will enable
running a shell command / script right before
connecting
Product: Portable OpenSSH
Version: 7.6p1
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: ssh
Assignee: unassigned-bugs at mindrot.org
Reporter: doron.behar at gmail.com
I've come to realize this feature is needed after encountering two bug
reports ([1][br1] and [2][br2]) and a [stackoverflow question][1].
I'm a GnuPG user and I use the ssh support of gpg-agent. It is
documented in [GnuPG's website][2] and on [Arch Linux' wiki][3] the
following:
> SSH has no way to tell the gpg-agent what terminal or X display it is running on. So when remotely logging into a box where a gpg-agent with SSH support is running, the pinentry will get popped up on whatever display the gpg-agent has been started.
The workaround used by gpg-agent (with ssh support) users is telling
gpg-agent to update the tty it is connected to (using the command:
`gpg-connect-agent updatestartuptty /bye`).
The [stackoverflow question][1] relates to authentication of the user
on the local machine to the network (using `kinit`) right before
connecting.
What if there was actually a 'BeforeHook' configuration option that
will enable users to run a certain command right before connecting to a
certain host or in general? It could help gpg-agent users and kinit
users as well.
Right now, users of gpg-agent with ssh agent emulated need to run these
commands every time they want to authenticate themselves. In my case,
because I use tmux most of the time and because the tty is changed for
every pane I use, I need to update the tty gpg-agent is connected to
every time I change the pane. That's really annoying and it can easily
be fixed with a hook like above.
[br1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851440
[br2]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854376
[1]:
https://stackoverflow.com/questions/32574142/can-i-set-up-a-before-hook-on-certain-ssh-hosts
[2]:
https://www.gnupg.org/documentation/manuals/gnupg/Common-Problems.html
[3]: https://wiki.archlinux.org/index.php/GnuPG#SSH_agent
--
You are receiving this mail because:
You are watching the assignee of the bug.
More information about the openssh-bugs
mailing list