On Fri, Feb 18, 2005 at 01:41:14PM -0500, Christopher Faylor wrote: > On Fri, Feb 18, 2005 at 09:21:56AM -0800, David Rothenberger wrote: > >On 2/18/2005 6:30 AM, Jean-Sebastien Trottier wrote: > >>On Wed, Feb 16, 2005 at 11:23:03AM -0800, David Rothenberger wrote: > >> > >>>I'm having a problem with the 20050215 snapshot (and the 20050131 as > >>>well). My ssh-agent connection is not being forwarded by ssh. This is > >>>working fine with the 20041119 snapshot. > >>> > >>Have you tried " ssh -A `hostname` " instead... just to make sure the > >>ssh actually forwards the agent? > >> > >>If this works (and it should), add "ForwardAgent yes" to your > >>~/.ssh/config file. see "man ssh_config" for details > > > >Yeah, I know about configuring ssh. As I mentioned in my original email, > >this is working fine for me with the 20041119 snapshot. So, I do have > >things configured correctly. But, I did try it with the -A switch and > >had the same result. > > I still can't duplicate this. Sorry. >
I'm able to reproduce it here...
With "current" cygwin1.dll version:
inside the ssh session, $SSH_AUTH_SOCK points to:
% ls -l $SSH_AUTH_SOCK
srwxrwxrwx 1 SYSTEM root 51 Feb 18 14:52 /tmp/ssh-rsSRvl3964/agent.3964=
% getfacl $SSH_AUTH_SOCK
# file: /tmp/ssh-rsSRvl3964/agent.3964
# owner: SYSTEM
# group: root
user::rwx
group::rwx
mask:rwx
other:rwx
ssh client is able to use this socket for further public key verfification
With 20050215 snapshot:
inside the ssh session, $SSH_AUTH_SOCK points to:
% ls -l $SSH_AUTH_SOCK
ls: /tmp/ssh-fHDEinn252/agent.252: Permission denied
% getfacl $SSH_AUTH_SOCK
getfacl: Permission denied
ssh client is *NOT* able to use this socket.
With both versions, the permissions on the socket's directory are
exactly the same:
% ls -ld /tmp/ssh-rsSRvl3964
drwx------+ 2 SYSTEM root 0 Feb 18 14:52 /tmp/ssh-rsSRvl3964
% getfacl /tmp/ssh-rsSRvl3964
# file: /tmp/ssh-rsSRvl3964
# owner: SYSTEM
# group: root
user::rwx
group::---
mask:rwx
other:---
default:user::rwx
default:group::---
default:other:---
I hope this helps... at least it should give you a clue
Note: I've got sshd running as a SYSTEM service. Running is in
non-detached or debug mode works fine, obviously.
Sebastien
> cgf
>
> --
> Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
> Problem reports: http://cygwin.com/problems.html
> Documentation: http://cygwin.com/docs.html
> FAQ: http://cygwin.com/faq/
>
signature.asc
Description: Digital signature
