RE: Need help starting the agent.

You don't have the sequence right:

1. set SSH_ASKPASS globally (= systemwide)
2. run ssh-agent so that it starts your session and all processes you start are its 'children'
3. from within your session run ssh-add to add all your keys to the agent.

2 working examples, first from CDE:

~/.dtprofile:

export SSH_ASKPASS="/opt/ssh_askpass/bin/x11-ssh-askpass" dtstart_session[0]="/usr/local/bin/ssh-agent $DT_BINPATH/dtsession"

~/.dt/sessions/sessionetc:

#!/bin/sh
/usr/local/bin/ssh-add < /dev/null > /dev/null

Second example Gnome 2.2 ( ;-) )

/etc/gdm/Sessions/Gnome:

Gnome:96:sshagent=/usr/bin/ssh-agent
Gnome:136:if [ -x $sshagent -a -z "$SSH_AUTH_SOCK" ]; then
Gnome:141:  exec $sshagent -- $gnomesession

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

~/.gnome2/sessionmanual:  

[Default]
num_clients=1

0,RestartStyleHint=3
0,Priority=50
0,RestartCommand=/opt/_scripts/gnome-ssh-askpass

/opt/_scripts/gnome-ssh-askpass:

#!/bin/bash
ssh-add -l>/dev/null
while [ $? == 1 ]; do
# ssh-add $HOME/.ssh/identity < /dev/null > /dev/null

   ssh-add < /dev/null > /dev/null
done

The 'hanging' of your X client, if you don't get this right, is very familiar ;-)

Sincerely

J. de Haan.

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

-----Oorspronkelijk bericht-----

Van: Steven W. Orr
Verzonden: donderdag 10 juli 2003 06:23
Aan: Haan, de, Jan; secureshell@securityfocus.com Onderwerp: Need help starting the agent.

I'm not sure why this doesn't work, but my X startup hangs up tight as a drum.

I put this before startkde in my .xinitrc

eval `ssh-agent`
SSH_ASKPASS=/usr/libexec/openssh/ssh-askpass ssh-add

So I commented out the whole line that runs ssh-add. I came up but I have an SSH_ASKPATH variable set. I have no idea why.

Can somone tell me exactly what to add to my .xinitrc?

Also, is there some way that I can autmate the passphrase? I know it may not be recommended but it's really what I want here.

Thanks.

Can we help you?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

P.S. I'm in the middle of the ssh book and it's really amazing. Lots of good stuff.

--
-Time flies like the wind. Fruit flies like a banana. Stranger things have -
steveo at syslang.net Received on Thu Jul 10 01:59:38 2003