Suggestion for XSession regarding keychain...

From: amit chakradeo <obsd(at)spam.chakradeo.net>
Date: Wed Jul 30 2003 - 12:11:43 EDT

SENDBUG: -*- sendbug -*-
SENDBUG: Lines starting with `SENDBUG' will be removed automatically, as
SENDBUG: will all comments (text enclosed in `<' and `>').
SENDBUG: 
SENDBUG: Choose from the following categories:
SENDBUG:
SENDBUG: system user library documentation ports kernel sparc i386 m68k mips ppc arm alpha ns32k vax sparc64 
SENDBUG: 
SENDBUG:

To: gnats@openbsd.org
Subject:
From: amit chakradeo <obsd@spam.chakradeo.net> Cc:
Reply-To: amit
X-sendbug-version: 3.97

>Submitter-Id: net
>Originator: Amit Chakradeo
>Organization:

net
>Synopsis: <synopsis of the problem (one line)>

Synopsis:	Better way to start xdm XSession...

>Severity:	<[ non-critical | serious | critical ] (one line)>

Severity:	non-critical

>Priority:	<[ low | medium | high ] (one line)>

Priority:	 low 

>Category:	<name of the product (one line)>

Category:	system ? (XF4/xc/programs/xdm/config/Xsession)

>Class:		<[ sw-bug | doc-bug | change-request | support ] (one line)>

Class:		 change-request

>Release:	<release number or tag (one line)>

Release:	HEAD (rev 1.7)

>Environment:

	
	System      : OpenBSD 3.3
	Architecture: OpenBSD.i386
	Machine     : i386

>Description:

	Suggestion for better way to start ssh-agent in Xsession.

>How-To-Repeat:

	make xsession not to start new ssh-agent if an already running

    ssh-agent is detected.
>Fix:

        I was thinking of a way to make Xsession work with keychain and     found many suggestions on the web. I think if the user has already     started ssh-agent (using keychain or otherwise), Xsession     shouldn't ignore it. This doesn't change anything for people     who aren't already running ssh-agent, but makes life easier for     people who do.

    Here is diff -c output for my suggestion: moglee: /etc/X11/xdm % diff -c Xsession-dist Xsession *** Xsession-dist Wed Jul 30 08:06:48 2003 - --- Xsession Wed Jul 30 08:07:25 2003

---

• 24,29 **** - --- 24,30 ---- fi done

+ if [ "$SSH_AGENT_PID" ]; then
  # if we have private ssh key(s), start ssh-agent and add the key(s)   id1=$HOME/.ssh/identity
  id2=$HOME/.ssh/id_dsa

---

• 32,37 **** - --- 33,39 ---- then eval `ssh-agent -s` ssh-add $id1 $id2 $id3 < /dev/null + fi fi

do_exit() {               

---

My .xsession file is like this:
#!/bin/sh
keychain -q --noask
/usr/local/bin/fvwm2
if [ "$SSH_AGENT_PID" ]; then

        ssh-add -D < /dev/null
fi

Thanks!
Amit Chakradeo Received on Wed Jul 30 12:13:37 2003