OpenSSH not requesting touch on FIDO keys (was: OpenSSH not requesting PIN code for YubiKey)

Damien Miller djm at mindrot.org
Mon Jul 20 13:12:10 AEST 2020


On Mon, 20 Jul 2020, Domenico Andreoli wrote:

> > > I guess it's due to the agent server not having any means to call back
> > > the client for notifying that user action is required [0].
> > 
> > ssh-agent will prompt via $SSH_ASKPASS if you have it configured.
> 
> Evidently my setup has some problem, I don't see any dialog. I'll
> investigate. Thanks.

Common problems:

1) you might not be running OpenSSH's ssh-agent. Some desktop environments
   will silently start their own, with varying levels of compatibility

2) Not starting ssh-agent with $DISPLAY set

3) Not having an askpass program at the path that ssh-agent expects
   or not having $SSH_ASKPASS pointing (again, before starting the agent)

-d


More information about the openssh-unix-dev mailing list