[Bug 2066] New: ssh tries the keys proposed by the agent before those passed with -i

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2066

            Bug ID: 2066
           Summary: ssh tries the keys proposed by the agent before those
                    passed with -i
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 6.0p1
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: pabs3 at bonedaddy.net

When I have IdentityFile set in ~/.ssh/config and multiple ssh keys
added to my ssh-agent, ssh -i ... or ssh -o 'IdentityFile ....' tries
keys from the ssh-agent before the keys I specified on the
command-line. The key I passed on the command-line is a passwordless
key that is command-limited on the remote end (limited to running
git-upload-pack so I can git clone/fetch over ssh without a
passphrase). One of the other keys in my ssh-agent is a
password-protected, confirmation requiring key that is
not-command-limited on the remote end. For now I'm working around this
by unsetting SSH_AUTH_SOCK whenever I want to use the passwordless
command-limited key.

There is another use-case listed in this Debian bug:
http://bugs.debian.org/513235

-- 
You are receiving this mail because:
You are watching the assignee of the bug.