search

Fudge / gltail

Real-time visualization of server traffic, events and statistics with Ruby, SSH and OpenGL
http://www.fudgie.org
609 stars 95 forks source link

glTail on OSX doesnt support SSH keys with a password set #25

Open stuarthopkins opened 11 years ago

stuarthopkins commented 11 years ago

Just tried using glTail on OSX and have found that it wont connect to systems where the SSH key is password-protected. Initially it was failing on ssh-askpass not being present, however even after using a common OSX script to provide that functionality I am getting the following error:

UNKNOWN:[/bin/bash: /usr/libexec/ssh-askpass: Operation not permitted

The ssh-askpass script is executable and has the correct permissions (its accessible by any user on the system), so I am not sure what is triggering the OMP error.

Fudge commented 11 years ago

It's the sandboxing of apps distributed via the app store. I can as Apple for an exception, but don't get your hopes up. Unfortunately I gave up on the whole askpass problem on OSX, never could get it to work from the sandbox.

On Sat, Aug 17, 2013 at 3:04 AM, Stuart Hopkins notifications@github.comwrote:

Just tried using glTail on OSX and have found that it wont connect to systems where the SSH key is password-protected. Initially it was failing on ssh-askpass not being present, however even after using a common OSX script to provide that functionality I am getting the following error:

UNKNOWN:[/bin/bash: /usr/libexec/ssh-askpass: Operation not permitted

The ssh-askpass script is executable and has the correct permissions (its accessible by any user on the system), so I am not sure what is triggering the OMP error.

— Reply to this email directly or view it on GitHubhttps://github.com/Fudge/gltail/issues/25 .

kgbvax commented 10 years ago

And now what? Is there a workaround?

yannickmcosta commented 9 years ago

I am also in the same situation, spend £7.99 on glTail and have to pretty much rewrite all my ssh stuff to get an error that says I cant do it in the first place? If it doesn't work why is it still on the App Store?

Fudge commented 9 years ago

What doesn't work? As long as the the key isn't password protected, it should work fine.

On Fri, Feb 13, 2015 at 12:29 PM, Yannick McCabe-Costa < notifications@github.com> wrote:

I am also in the same situation, spend £7.99 on glTail and have to pretty much rewrite all my ssh stuff to get an error that says I cant do it in the first place? If it doesn't work why is it still on the App Store?

— Reply to this email directly or view it on GitHub https://github.com/Fudge/gltail/issues/25#issuecomment-74240462.

yannickmcosta commented 9 years ago

After re-pushing all my ssh keys and installing ssh-askpass, when running glTail, it still ask for permission to access the /Users/user_name/.ssh/id_rsa and asks for the passphrase for that file. From a terminal session, I can ssh into my servers without using passwords as I have pushed all the keys, however glTail is asking for access to the key files, which it should technically be asking permission for via Keychain, due to how Apple have reworked the Keychain. Having no password protection on a private key is also probably not the best idea...

Fudge commented 9 years ago

Not having a password on the private key is not the best idea, but it's the only way I was able to make it work while being locked into the jail enforced by the mac app store. If you ping me at mr@fudgie.org I'll get you sorted with a copy that doesn't rely on the app store for distribution, and can talk to both ssh-agent and ssh-askpass.

On Fri, Feb 13, 2015 at 12:39 PM, Yannick McCabe-Costa < notifications@github.com> wrote:

After re-pushing all my ssh keys and installing ssh-askpass, when running glTail, it still ask for permission to access the /Users/user_name/.ssh/id_rsa and asks for the passphrase for that file. From a terminal session, I can ssh into my servers without using passwords as I have pushed all the keys, however glTail is asking for access to the key files, which it should technically be asking permission for via Keychain, due to how Apple have reworked the Keychain. Having no password protection on a private key is also probably not the best idea...

— Reply to this email directly or view it on GitHub https://github.com/Fudge/gltail/issues/25#issuecomment-74241481.