Keys from -i should have precedence over agent keys

Damien Miller djm at mindrot.org
Wed Jan 22 07:56:42 EST 2014


On Tue, 21 Jan 2014, Max Thoursie wrote:

> Hi,
> 
> I believe it would make more sense if,
> when specifying a key with -i, that key (or keys) should be tried prior to
> the keys in the agent.
> 
> Otherwise, if I have many keys in my agent, the server will kick me out. I
> can see no situation where one would like to use agent keys instead of the
> ones explicitly stated.
> 
> Do you agree?

Yes, and that is what the code is supposed to do already. See
sshconnect2.c:pubkey_prepare()

-d


More information about the openssh-unix-dev mailing list