ssh woes on windows

John Arbash Meinel john at arbash-meinel.com
Sat Jun 28 15:39:43 BST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark Hammond wrote:
|> Paramiko should generally be present, because we need it for sftp
|> handling.
|
| Yes, and in the binary we know it will be available.
|
|> I personally prefer to use 'ssh' if it is available, because I already
|> have ssh-agent, and a real ssh key, etc.
|
| You prefer ssh over paramiko?  In that case, I don't understand how my
example would have worked for you - my example shows the ssh key is not
used to authenticate with Launchpad (hence plink can't connect), but
instead a couple of extra keys seem to be used by paramiko.  Can ssh.exe
connect to launchpad for you?  How about if ssh-agent doesn't have your
personal key loaded?
|

Yes. ssh.exe will notice that I have a key set up in ~/.ssh/config and
it will prompt me on the terminal to enter the password for it.

I don't know why plink is unable to connect directly to the terminal to
ask questions, and ssh *is* able to do so. It may be that it is a cygwin
program, but both are ultimately running under cmd.exe.


|> I would be fine with having an ssh check first, and a plink check last,
|> or removing plink in general.
|
| That makes sense if ssh does work for you where plink doesn't for me.
  But I'd expect to see the exact same behaviour if I installed ssh-agent
locally - finding ssh.exe on my path would be enough to prevent use of
paramiko, and lead to the exact same problems.
|
| I'm sure I'm still missing something though...
|
| Thanks,
|
| Mark
|

ssh.exe would skip paramiko, and if your only key is in pageant it
wouldn't work, correct. My only key is in ~/.ssh/id_rsa and has been
configured for ssh.exe to find it. And that works quite well.

The only real problem, atm, is getting the ssh-agent to be recognized
under all open shells. If I start it in one, the SSH_AGENT_SOCK isn't
propagated to all of them. A while back I had it all worked out.

I suppose forcing it to paramiko and manually loading my key would be an
option. I don't really know a way to get pageant to know that there is a
key out there that it *should* be using, and prompting the user for the
passphrase. I've only seen the manual "add this key" for pageant. Which
paramiko (and supposedly putty) can then try to use when connecting.

John
=:->



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Cygwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhmTS8ACgkQJdeBCYSNAAP+8QCgkJnw8IjkJAYdQya7tETKKWpb
QMMAn1TANIQynvKzHXASbMndEn+9SqIS
=nBed
-----END PGP SIGNATURE-----



More information about the bazaar mailing list