ssh agent stopped working (MacOS)
hi there, I setup the ssh agent as per guide and was able to login on via ssh on my server.
here is my ~/.ssh/config
Include ~/.colima/ssh_config
Host *
IdentityAgent "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"
and have left ~/.config/1Password/ssh/agent.toml untouched
[[ssh-keys]] vault = "Personal"
I added my ssh-ed25519 public key on the server (this was generated by 1Password and are stored in my Personal vault).
I was able to login fine for few times, but now all of a sudden the agent stopped working.
1Password does not prompt any window to authorise the login anymore.
I tried to reboot several times but nothing.
If I ssh-add -l I can see the two fingerprints.
256 SHA256:redacted name (ED25519) 256 SHA256:redacted name (ED25519)
This is the output of ssh -vT user@ip:
OpenSSH_9.0p1, LibreSSL 3.3.6 debug1: Reading configuration data /Users/user/.ssh/config debug1: Reading configuration data /Users/user/.colima/ssh_config debug1: /Users/user/.ssh/config line 3: Applying options for * debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files debug1: /etc/ssh/ssh_config line 54: Applying options for * debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling debug1: Connecting to ip [ip] port 22. debug1: Connection established. debug1: identity file /Users/user/.ssh/id_rsa type -1 debug1: identity file /Users/user/.ssh/id_rsa-cert type -1 debug1: identity file /Users/user/.ssh/id_ecdsa type -1 debug1: identity file /Users/user/.ssh/id_ecdsa-cert type -1 debug1: identity file /Users/user/.ssh/id_ecdsa_sk type -1 debug1: identity file /Users/user/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /Users/user/.ssh/id_ed25519 type -1 debug1: identity file /Users/user/.ssh/id_ed25519-cert type -1 debug1: identity file /Users/user/.ssh/id_ed25519_sk type -1 debug1: identity file /Users/user/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /Users/user/.ssh/id_xmss type -1 debug1: identity file /Users/user/.ssh/id_xmss-cert type -1 debug1: identity file /Users/user/.ssh/id_dsa type -1 debug1: identity file /Users/user/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.0 debug1: Remote protocol version 2.0, remote software version OpenSSH_9.2p1 debug1: compat_banner: match: OpenSSH_9.2p1 pat OpenSSH* compat 0x04000000 debug1: Authenticating to ip:22 as 'user' debug1: load_hostkeys: fopen /Users/user/.ssh/known_hosts2: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: algorithm: sntrup761x25519-sha512@openssh.com debug1: kex: host key algorithm: ssh-ed25519 debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: SSH2_MSG_KEX_ECDH_REPLY received debug1: Server host key: ssh-ed25519 SHA256:redacted debug1: load_hostkeys: fopen /Users/user/.ssh/known_hosts2: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: Host 'ip' is known and matches the ED25519 host key. debug1: Found key in /Users/user/.ssh/known_hosts:1 debug1: rekey out after 134217728 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: rekey in after 134217728 blocks debug1: get_agent_identities: agent returned 2 keys debug1: Will attempt key: ip ED25519 SHA256:redacted agent debug1: Will attempt key: redacted ED25519 SHA256:redacted agent debug1: Will attempt key: /Users/user/.ssh/id_rsa debug1: Will attempt key: /Users/user/.ssh/id_ecdsa debug1: Will attempt key: /Users/user/.ssh/id_ecdsa_sk debug1: Will attempt key: /Users/user/.ssh/id_ed25519 debug1: Will attempt key: /Users/user/.ssh/id_ed25519_sk debug1: Will attempt key: /Users/user/.ssh/id_xmss debug1: Will attempt key: /Users/user/.ssh/id_dsa debug1: SSH2_MSG_EXT_INFO received debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,sk-ssh-ed25519@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,webauthn-sk-ecdsa-sha2-nistp256@openssh.com,ssh-dss,ssh-rsa,rsa-sha2-256,rsa-sha2-512> debug1: kex_input_ext_info: publickey-hostbound@openssh.com=<0> debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,password debug1: Next authentication method: publickey debug1: Offering public key: ip ED25519 SHA256:redacted agent debug1: Authentications that can continue: publickey,password debug1: Offering public key: redacted ED25519 SHA256:redacted agent debug1: Authentications that can continue: publickey,password debug1: Trying private key: /Users/user/.ssh/id_rsa debug1: Trying private key: /Users/user/.ssh/id_ecdsa debug1: Trying private key: /Users/user/.ssh/id_ecdsa_sk debug1: Trying private key: /Users/user/.ssh/id_ed25519 debug1: Trying private key: /Users/user/.ssh/id_ed25519_sk debug1: Trying private key: /Users/user/.ssh/id_xmss debug1: Trying private key: /Users/user/.ssh/id_dsa debug1: Next authentication method: password user@ip's password:
0
Comments
-
I restarted the server and noticed this message:
debug3: send packet: type 1 debug1: channel 0: free: client-session, nchannels 1 debug3: channel 0: status: The following connections are open: #0 client-session (t4 r0 i0/0 o0/0 e[write]/0 fd 4/5/6 sock -1 cc -1 io 0x01/0x00)
After restart, I was able to login again using 1password... I guess the server wasn't letting me in because it was seeing an active connection already?
0 -
I also ran into the same issue when attempting to ssh into my vyos server.
0
This discussion has been closed.