Unable to use ssh-agent with confirmation, when logged in on a virtual terminal

Johannes Kastl mail at ojkastl.de
Wed Nov 5 06:05:13 EST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good evening,

On 03.11.2014 Johannes Kastl wrote:

> I am trying to get ssh-add with the -c option to work. But I
> always get this error:
>> Agent admitted failure to sign using the key.

Mark and Angel replied on and off the list, and both suggested that
the SSH_ASKPASS variable is set wrong.

I thought that these variables are for using *graphical* programs to
ask for the passphrase. And on most of my machines, no X server is
even installed. So I thought these variables are not necessary, and it
does not matter it they are empty.

As I replied to Angel, I would have thought that there is a fallback,
but apparently this is not the case. Or it is not working.

However, when I set SSH_ASKPASS to /usr/lib/ssh/ssh-askpass and the
DISPLAY variable to 'foo', I still get the error.

I noticed that on the one machine with the graphical gui, I get the
prompt via kwallet (KDE's password safe), but it is enough to click OK
to allow this request. But I had to unlock my password safe first.

And the SSH_ASKPASS variable is set to /usr/lib/ssh/ssh-askpass on
this machine. So maybe this is really just a prompt for machines with
a running X server...

Regards,
Johannes
- -- 
Coming back to where you started is not the same as never leaving.
(Terry Pratchett)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with SeaMonkey - http://www.enigmail.net/

iEYEARECAAYFAlRZI2gACgkQzi3gQ/xETbIhDQCeLIoNjCQzwExdizHEbKGC22Jq
zhUAnRakl3qIncNvWRaQRao3/f3J3K+/
=FK4z
-----END PGP SIGNATURE-----



More information about the openssh-unix-dev mailing list