How to get "Enter passphrase" on command line rather than GUI pop-up?

Chris Green cl at isbd.net
Wed Jan 3 22:36:08 AEDT 2024


On Wed, Jan 03, 2024 at 10:04:20AM +0000, Stuart Henderson wrote:
> On 2024/01/02 09:51, Chris Green wrote:
> > I think I have it! I need to unset SSH_AUTH_SOCK, that's all that's
> > needed.  See:-
> > 
> >     chris$ ssh -i backup_id_rsa backup
> > [here the pop-up appears and I cancel it]
> >     sign_and_send_pubkey: signing failed for RSA "backup_id_rsa" from
> >     agent: agent refused operation
> >     chris at backup's password: 
> > 
> >     chris$ env | grep SSH
> >     SSH_AUTH_SOCK=/run/user/1000/keyring/ssh
> >     SSH_ASKPASS_REQUIRE=never
> >     chris$ unset SSH_AUTH_SOCK
> >     chris$ ssh -i backup_id_rsa backup
> >     Enter passphrase for key 'backup_id_rsa': 
> >     chris at backup$ 
> > 
> > So the SSH_ASKPASS etc. are irrelevant for my set-up.  I thought I'd
> > tried unsetting SSH_AUTH_SOCK before but obviously I hadn't, I guess
> > the need to specify the key file is a result of not having that but
> > it's not a problem for me really.
> 
> You might like to try something like this in .ssh/config
> 
> Host backup
>   IdentityAgent none
>   IdentityFile  ~/backup_id_rsa

Yes, thank you, I've already done it:-
    #
    #
    # backup, use public-key authentication
    #
    Host backup
        IdentityFile ~/.ssh/backup_id_rsa
        IdentityAgent none
 
:-)

Thank you for this and all the other responses here, I'm now fairly
sorted (and understand ssh-agent better than I did!).

-- 
Chris Green


More information about the openssh-unix-dev mailing list