[Bug 3153] Prefer user specified keys to avoid the agent overloading MaxAuthTries before even trying the key that was specified

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Apr 23 16:40:22 AEST 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3153

--- Comment #1 from Christian Ehrhardt <christian.ehrhardt at canonical.com> ---
Example effect of the patch:

Former behavior on a server with MaxAuthTries 4 the explicitly
specified key would not have been tried:

$ ssh -i /tmp/testkey -v horsea "echo 1" |& grep "Will attempt"
debug1: Will attempt key: /home/paelzer/.ssh/id_rsa RSA ... agent
debug1: Will attempt key: ubuntu at cpaelzer-bastion RSA ... agent
debug1: Will attempt key: paelzer at lap RSA ... agent
debug1: Will attempt key: paelzer at swarm.n RSA ... agent
debug1: Will attempt key: /tmp/testkey RSA ... explicit

With the change becomes  this and works:

$ ssh -i /tmp/testkey -v horsea "echo 1" |& grep "Will attempt"
debug1: Will attempt key: /tmp/testkey RSA ... explicit
debug1: Will attempt key: /home/paelzer/.ssh/id_rsa RSA ... agent
debug1: Will attempt key: ubuntu at cpaelzer-bastion RSA ... agent
debug1: Will attempt key: paelzer at lap RSA ... agent
debug1: Will attempt key: paelzer at swarm.n RSA ... agent

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list