Re: KDE ssh-agent

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Mike -- EMAIL IGNORED wrote:
> On Thu, 30 Aug 2007 16:46:28 -0400, Todd Zullinger wrote:
> 
> [...]
>> Yep, after you scratch your head for half an hour wondering why things
>> have broken.  :)
> 
> Well, then, what might be broken?  Id the agent provided for something
> other than my "convenience"?

I just meant that if you tweak the script and then it gets updated via
yum or whatever, you may end up scratching your head for a bit before
realize that the tweak you made several months ago got overwritten.
At least, that's what happens to me. :)

>> What it is that breaks by having ssh agent started automatically?
>>
> 
> My script checks for a preexisting agent, and if it finds one, it
> assumes it is one I created and tries to add a key to it.  However,
> if the system created an agent, other things I put in place when I
> create the agent are not there, and I get a failure report.

Okay.  So obviously the best thing to work with your scripts currently
will be if SSH_AGENT_PID is set so that when the xinitrc-common script
checks for it, it's already set.  I haven't made time to log out and
test that yet.  Have you tried it to see if that will work?

Also, might it not be more robust (and better in the long term) if
your script checked for the things you put in place when yo start an
ssh-agent?  That way it wouldn't matter whether the agent was started
by xinitrc-common or you.

At what point do you start your agent?  If it's after the xinit
scripts would be starting it, then doesn't that leave you unable to
use the agent conveniently from some processes started in your X
session?

> I am reminded of the air conditioning in our family cars.  I have a
> 1999 Camry.  It has an excellent AC system.  When I want more wind,
> I turn the fan-speed knob.  Now my wife has a 2003 Camry.  When it
> decides I should have more wind, it turns up the fan... I dread the
> day I will have to shop for a new car.  If I wanted a system to
> transparently decide things like "I should have an ssh-agent", I
> would use Microsoft (may we be protected from the evil eye). ;)

I understand that concern.  There's also the view that it's nice to
have some common things handled so that every user doesn't need to
reinvent the wheel.  I used to always patch the x startup scripts
precisely to add ssh-agent, so I was happy when that change got added.

Unless it turns out that you can't set your own SSH_AGENT_PID variable
before the xinitrc-common script runs, you should be able to easily
work with the current startup scripts to not start an agent for you,
if you prefer not to.  And if not, then you can almost as easily
modify the xinitrc-common script to not start an agent.

If the latter case is true, then it might be worth submitting a patch
to make the xinitrc-common script check for something user controlled
(file, variable, etc.) which would allow you to tell it not to start
an agent for you.

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
A snooze button is a poor substitute for no alarm clock at all.

Attachment: pgpa5FvEpZMJ8.pgp
Description: PGP signature


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux