I want to write an SSH agent that knows what user/host you're trying to connect to, but the protocol doesn't provide that. So I just had a ridiculous idea. What if I make a FUSE filesystem that materializes listening UNIX sockets on the fly, and set IdentityAgent to <fs>/%r@%h
-
Does SSH open the connection before it does the agent request? You could potentially get SO_PEERCRED and netstat the connection endpoint
But that wouldn't allow nice handling of proxies or good jailing of the agent.
My previous idea was to ProxyCommand something they told the agent what you're connecting to, but that has race condition issues with multiple connections
-
-
I was going to recommend something like that. Does IdentitiesOnly and IdentityFile change your need at all?
-
The client does not actually hold the private key, so I have to use agent mode. The goal is to have an agent server give you access to the key you need, but it needs to know what you're trying to connect to.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.