kryptco / kr

DEPRECATED A dev tool for SSH auth + Git commit/tag signing using a key stored in Krypton.
https://krypt.co/developers/
Other
1.59k stars 109 forks source link

authentication agent forwarding not working #209

Open OGKevin opened 6 years ago

OGKevin commented 6 years ago

Hey there,

I remember I was able to ssh -A server and then was able to use KR(do git pulls/ssh) on the remote machine without having to actually install KR on the remote machine.

Recently I tried to do this again, but it seems to not be working. When running debug I can see the following:

debug1: Authentication succeeded (publickey).
Authenticated to xxxx (via proxy).
debug1: channel 0: new [client-session]
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: proc
debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0
debug1: Requesting authentication agent forwarding.
debug1: Sending environment.
debug1: Sending env LC_CTYPE = UTF-8

debug1: Requesting authentication agent forwarding.

I'm not sure however if this means that the request was accepted by the remote or not. Did something change recently that broke/disabled this ?

kcking commented 6 years ago

Nothing has changed in kr with respect to agent forwarding, maybe ssh -vv will contain something more helpful? On Fri, May 25, 2018 at 6:48 PM Kevin Hellemun notifications@github.com wrote:

Hey there,

I remember I was able to ssh -A server and then was able to use KR(do git pulls/ssh) on the remote machine without having to actually install KR on the remote machine.

Recently I tried to do this again, but it seems to not be working. When running debug I can see the following:

debug1: Authentication succeeded (publickey). Authenticated to xxxx (via proxy). debug1: channel 0: new [client-session] debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session. debug1: pledge: proc debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0 debug1: Requesting authentication agent forwarding. debug1: Sending environment. debug1: Sending env LC_CTYPE = UTF-8

debug1: Requesting authentication agent forwarding. I'm not sure however if this means that the request was accepted by the remote or not. Did something change recently that broke/disabled this ?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/kryptco/kr/issues/209, or mute the thread https://github.com/notifications/unsubscribe-auth/ABSUUxbGCQkL4GIFwkQzJDOgf3piY5Pzks5t2DXagaJpZM4UOSEg .

OGKevin commented 6 years ago

With -vv i see

debug1: Requesting authentication agent forwarding.
debug2: channel 0: request auth-agent-req@openssh.com confirm 0

and take the 0 as false ?

Not sure why tho 🤔

kcking commented 6 years ago

Apologies for the delay on this. Agent forwarding seems to be working fine for me, and my -vv output is the same as yours.

Does ssh-add -L output your krypton key when you are logged into the first server?

OGKevin commented 6 years ago

@kcking yes it does.

kcking commented 6 years ago

Can you check if the ssh -vv output to the final destination server offers the Krypton key? It sounds like the Krypton key may not have access to this server.