ssh-agent forwarding (order of authentication)

podollb · 05-15-2004, 09:29 AM

I have created a ssh key (dsa) that I put on some remote systems (at work) in ~/.ssh/authorized_keys2 and then I was able to start up an agent from home and log in passwordless, but I have 4 linux boxes at home that I have done the exact same thing on and it still prompts me for the password (of my user account) and ignores the ssh-agent I am forwarding. So my question is do I need to change the order of authentication somewhere so that I can set it up to first look for a ssh-agent being forwarded rather than prompting me for the user password?

mago · 02-23-2011, 09:16 AM

@work do you have:

Code:

Host *
ForwardAgent yes

on your /etc/ssh/ssh_config or your ~/.ssh/config file?

podollb · 02-23-2011, 09:49 AM

Thanks for the reply, although I resolved the issue about 6 years ago

nak1090 · 10-29-2011, 06:23 AM

Hi all
I have a diagram A<-->B<-->C
A can SSH to B without password, B can SSH to C without password
I want SSH from A to C with agent forward.
I had config in /etc/ssh/ssh_config

Code:

Host *
ForwardAgent yes

But I can't remote ssh from A to C..
Help me.
Thanks!!

Reuti · 10-29-2011, 01:47 PM

Why didn’t you create a new thread, as you have completely new question?

Anyway, you will need to create a tunnel for the final connection:

Code:

$ ssh -N -L 7890:C:22 B

When you get no error it’s fine, although the prompt won’t come back. You can send this eiter in the background by & or use in another session the just created tunnel:

Code:

$ ssh -p 7890 localhost

Instead of 7890 you can use any other available port too.

nak1090 · 10-29-2011, 02:21 PM

Hello Reuti, thanks for your reply.
Because I see Podollb resolved the issue so I post question here.
But I want remote from A to C without password thought B. B is a Agent-forwarding.
You can see "Public Key Access with Agent Forwarding " in http://unixwiz.net/techtips/ssh-agent-forwarding.html

nak1090 · 11-03-2011, 12:30 AM

Who can help me, please !??

Reuti · 11-03-2011, 06:35 AM

Did you try what I posted and got an error?

nak1090 · 11-03-2011, 07:17 AM

Your post was no error...
But I want do it by another way

.
A <---> B: SSH without password by key-based authentication
B <---> C: SSH without password by key-based authentication
And I want A <---> C: ssh without password which don't use key-based authentication (B is forwarding)
Although I have config in /etc/ssh/ssh_config

Quote:

Host *
ForwardAgent yes

But it not working :-s