Re: ssh forward agent

2025-06-03 Thread Todd Zullinger
Chris Adams wrote: > Once upon a time, Tim said: >> Bob Marčan: >>> BTW, it's "sudo -i" >> >> No, it's not. When I said I typed "su -" I meant that I typed "su -". >> >> I'm not sudo-ing when I'm doing a plethora of things, I've become root >> with the "su" command, and using "su -" with the ad

Re: ssh forward agent

2025-06-03 Thread Tim via users
Bob Marčan: >>> BTW, it's "sudo -i" Tim: >> No, it's not. When I said I typed "su -" I meant that I typed "su -". Chris Adams: > Which is what "sudo -i" does, without the superfluous "su -". And you > can use "sudo -s" instead of "sudo su" too. > > I don't know where the idea that you need to

Re: ssh forward agent

2025-06-03 Thread Chris Adams
Once upon a time, Tim said: > Bob Marčan: > > BTW, it's "sudo -i" > > No, it's not. When I said I typed "su -" I meant that I typed "su -". > > I'm not sudo-ing when I'm doing a plethora of things, I've become root > with the "su" command, and using "su -" with the added dash I'm in > their env

Re: ssh forward agent

2025-06-03 Thread Tim via users
Tim: Having said that, on my system where I am the sole user, I'll only use sudo if I know I'm doing just one thing. If I have to do a series of things, I will "su -" and do them all as root. It's just too tedious Bob Marčan: > BTW, it's "sudo -i" No, it's not. When I said I typ

Re: ssh forward agent

2025-06-03 Thread Patrick O'Callaghan
On Tue, 2025-06-03 at 13:06 +0100, Patrick O'Callaghan wrote: > > > > Having said that, on my system where I am the sole user, I'll only use > > > > sudo if I know I'm doing just one thing.  If I have to do a series of > > > > things, I will "su -" and do them all as root.  It's just too tedious >

Re: ssh forward agent

2025-06-03 Thread Bob Marčan via users
On Wed, 04 Jun 2025 01:33:40 +0930 "Tim via users" wrote: > poc: > >> "sudo bash" will not run the login resources. > > Bob Marčan: > > That's exactly what I want. > > "su" without the dash after it will do that, too. But horses for > courses applies (*you* do what *you* need). > True.

Re: ssh forward agent

2025-06-03 Thread Tim via users
poc: >> "sudo bash" will not run the login resources. Bob Marčan: > That's exactly what I want. "su" without the dash after it will do that, too. But horses for courses applies (*you* do what *you* need). -- uname -rsvp Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 202

Re: ssh forward agent

2025-06-03 Thread Tim via users
Tim: >>> Having said that, on my system where I am the sole user, I'll only use >>> sudo if I know I'm doing just one thing. If I have to do a series of >>> things, I will "su -" and do them all as root. It's just too tedious >>> to do "sudo some-command" over and over. poc: >> Exactly. Bob M

Re: ssh forward agent

2025-06-03 Thread Go Canes
On Tue, Jun 3, 2025 at 8:00 AM Frederic Muller wrote: > Any idea why this is happening? I check the authorized_keys and it's > there, and it's the same as the /home/user/.ssh/authorized_keys and the > key.pub for that user on my local machine. Verify the permissions on the relevant files *and* di

Re: ssh forward agent

2025-06-03 Thread Francis . Montagnac
On Tue, 03 Jun 2025 19:00:06 +0700 Frederic Muller wrote: > Jun 3 18:54:09 host sudo[2371]: pam_ssh_agent_auth: Failed > Authentication: `user' as `user' using /etc/security/authorized_keys > Any idea why this is happening? I check the authorized_keys and it's > there, and it's the same as the

Re: ssh forward agent

2025-06-03 Thread Bob Marčan via users
On Tue, 03 Jun 2025 13:06:18 +0100 "Patrick O'Callaghan" wrote: > On Tue, 2025-06-03 at 10:45 +, Bob Marčan via users wrote: > > > > Having said that, on my system where I am the sole user, I'll only use > > > > sudo if I know I'm doing just one thing.  If I have to do a series of > > > > thi

Re: ssh forward agent

2025-06-03 Thread Frederic Muller
On 03/06/2025 13:15, francis.montag...@inria.fr wrote: Hi. On Mon, 02 Jun 2025 22:45:48 +0700 Frederic Muller wrote: On 02/06/2025 21:45, francis.montag...@inria.fr wrote: AFAIK sudo cannot be configured to authenticate with SSH keys. of course it can. Effectively, a search shows that this i

Re: ssh forward agent

2025-06-03 Thread Patrick O'Callaghan
On Tue, 2025-06-03 at 10:45 +, Bob Marčan via users wrote: > > > Having said that, on my system where I am the sole user, I'll only use > > > sudo if I know I'm doing just one thing.  If I have to do a series of > > > things, I will "su -" and do them all as root.  It's just too tedious BTW, i

Re: ssh forward agent

2025-06-03 Thread Frederic Muller
On 03/06/2025 18:32, Frederic Muller wrote: debugging... So I am getting this for the /var/log/auth.log [...] Jun  3 18:54:09 airport1 sudo[2371]: pam_ssh_agent_auth: trying public key file /etc/security/authorized_keys Jun  3 18:54:09 host sudo[2371]: pam_ssh_agent_auth: auth_secure_filenam

Re: ssh forward agent

2025-06-03 Thread Bob Marčan via users
On Tue, 03 Jun 2025 10:43:37 +0100 "Patrick O'Callaghan" wrote: > On Tue, 2025-06-03 at 15:07 +0930, Tim via users wrote: > > On Mon, 2025-06-02 at 11:50 -0500, Ranjan Maitra via users wrote: > > > passwordless sudo seems quite risky to me (and seems to defeat the > > > purpose of sudo). > >

Re: ssh forward agent

2025-06-03 Thread Patrick O'Callaghan
On Tue, 2025-06-03 at 15:07 +0930, Tim via users wrote: > On Mon, 2025-06-02 at 11:50 -0500, Ranjan Maitra via users wrote: > > passwordless sudo seems quite risky to me (and seems to defeat the > > purpose of sudo). > > [...] > Having said that, on my system where I am the sole user, I'll only

Re: ssh forward agent

2025-06-02 Thread Francis . Montagnac
Hi. On Mon, 02 Jun 2025 22:45:48 +0700 Frederic Muller wrote: > On 02/06/2025 21:45, francis.montag...@inria.fr wrote: >> AFAIK sudo cannot be configured to authenticate with SSH keys. > of course it can. Effectively, a search shows that this is possible by configuring sudo with pam_ssh_agent_au

Re: ssh forward agent

2025-06-02 Thread Tim via users
On Mon, 2025-06-02 at 11:50 -0500, Ranjan Maitra via users wrote: > passwordless sudo seems quite risky to me (and seems to defeat the > purpose of sudo). Yes, and no... If I "sudo something" the password I'm going to type is my own, which I already know. Though it does offer an "are you sure" m

Re: ssh forward agent

2025-06-02 Thread Ranjan Maitra via users
On Mon Jun02'25 10:45:48PM, Frederic Muller wrote: > From: Frederic Muller > Date: Mon, 2 Jun 2025 22:45:48 +0700 > To: users@lists.fedoraproject.org > Reply-To: Community support for Fedora users > Subject: Re: ssh forward agent > > On 02/06/2025 21:45, francis.montag

Re: ssh forward agent

2025-06-02 Thread Frederic Muller
On 02/06/2025 21:45, francis.montag...@inria.fr wrote: Hi. On Mon, 02 Jun 2025 21:32:41 +0700 Frederic Muller wrote: I copied the old .ssh from my backup so it's all the same files and I do manage to ssh to the server, just not sudo su. This is thus a change in the sudo configurations, not SS

Re: ssh forward agent

2025-06-02 Thread Francis . Montagnac
Hi. On Mon, 02 Jun 2025 21:32:41 +0700 Frederic Muller wrote: > I copied the old .ssh from my backup so it's all the same files and I do > manage to ssh to the server, just not sudo su. This is thus a change in the sudo configurations, not SSH. AFAIK sudo cannot be configured to authenticate wi

ssh forward agent

2025-06-02 Thread Frederic Muller
Hi! Is there something that changed in F42 making forward agent no longer working? I'm logging in using SSH key to a VPS to which I usually log in without any problem. I then sudo su, but it's asking for a password. My config is as such: Host myhost     Hostname thatsite.com     ForwardAgen