GNU logs - #33165, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#33165: GNOME keyring SSH agent => sign_and_send_pubkey: signing failed: agent refused operation
Resent-From: Henk Katerberg <henk.katerberg@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Oct 2018 15:22:01 +0000
Resent-Message-ID: <handler.33165.B.154056730819697 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 33165 <at> debbugs.gnu.org
From: Henk Katerberg <henk.katerberg@HIDDEN>
Thread-Topic: GNOME keyring SSH agent => sign_and_send_pubkey: signing failed:
 agent refused operation
Thread-Index: AQHUbQkcImqd8lqq/EiIcJvM+897Gw==
Date: Fri, 26 Oct 2018 08:51:41 +0000
Message-ID: <743863752d3942c2a73477794d223b9b@HIDDEN>
Accept-Language: en-US, nl-NL
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On GuixSD running Gnome: the command 'ssh <remote>' results in error
  sign_and_send_pubkey: signing failed: agent refused operation
and then falls back to password authentication.

(Work-around is to manually start the openssh agent 'eval $(ssh-agent)' aft=
er which 'ssh <remote>' is successfull. From this I conclude that the key p=
air used and the .ssh/config entry for <remote> are OK.)=

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Henk Katerberg <henk.katerberg@HIDDEN>
Subject: bug#33165: Acknowledgement (GNOME keyring SSH agent =>
 sign_and_send_pubkey: signing failed: agent refused operation)
Message-ID: <handler.33165.B.154056730819697.ack <at> debbugs.gnu.org>
References: <743863752d3942c2a73477794d223b9b@HIDDEN>
X-Gnu-PR-Message: ack 33165
X-Gnu-PR-Package: guix
Reply-To: 33165 <at> debbugs.gnu.org
Date: Fri, 26 Oct 2018 15:22:01 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 33165 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
33165: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D33165
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#33165: GNOME keyring SSH agent => sign_and_send_pubkey: signing failed: agent refused operation
Resent-From: Chris Marusich <cmmarusich@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 30 Nov 2018 02:01:01 +0000
Resent-Message-ID: <handler.33165.B33165.154354323018567 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Henk Katerberg <henk.katerberg@HIDDEN>
Cc: 33165 <at> debbugs.gnu.org
From: Chris Marusich <cmmarusich@HIDDEN>
References: <743863752d3942c2a73477794d223b9b@HIDDEN>
Date: Thu, 29 Nov 2018 18:00:16 -0800
In-Reply-To: <743863752d3942c2a73477794d223b9b@HIDDEN> (Henk Katerberg's
 message of "Fri, 26 Oct 2018 08:51:41 +0000")
Message-ID: <87d0qncojz.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Henk Katerberg <henk.katerberg@HIDDEN> writes:

> On GuixSD running Gnome: the command 'ssh <remote>' results in error
>   sign_and_send_pubkey: signing failed: agent refused operation
> and then falls back to password authentication.
>
> (Work-around is to manually start the openssh agent 'eval
> $(ssh-agent)' after which 'ssh <remote>' is successfull. From this I
> conclude that the key pair used and the .ssh/config entry for <remote>
> are OK.)

This sounds a lot like the issue I describe in my blog post here:

https://www.gnu.org/software/guix/blog/2018/customize-guixsd-use-stock-ssh-=
agent-everywhere/

From=20the blog post:

"Unfortunately, up until GNOME 3.28 (the current release), the GNOME
Keyring's SSH agent implementation was not as complete as the stock SSH
agent from OpenSSH. As a result, earlier versions of GNOME Keyring did
not support many use cases. This was a problem for me, since GNOME
Keyring couldn't read my modern SSH keys.

[...]

Happily, starting with GNOME 3.28, GNOME Keyring delegates all SSH agent
functionality to the stock SSH agent from OpenSSH. They have removed
their custom implementation entirely. This means that today, I could
solve my problem simply by using the most recent version of GNOME
Keyring. I'll probably do just that when the new release gets included
in Guix. However, when I first encountered this problem, GNOME 3.28
hadn't been released yet, so the only option available to me was to
customize GNOME Keyring or remove it entirely."

Since your work-around was the same as mine - use the stock OpenSSH
ssh-agent - you might find the blog post useful for your situation.

The version of GNOME currently packaged in Guix is 3.24.3 (see
gnu/packages/gnome.scm).  Because GNOME Keyring just wrap's OpenSSH's
ssh-agent starting with GNOME 3.28, it seems likely that upgrading to
GNOME 3.28 or later will fix your issue.  If your problem continues to
occur even after Guix has upgraded GNOME to 3.28 or later, then we will
need to investigate more.

=2D-=20
Chris

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=5/6D
-----END PGP SIGNATURE-----
--=-=-=--

Message sent to bug-guix@HIDDEN:

Subject: bug#33165: GNOME keyring SSH agent => sign_and_send_pubkey: signing failed: agent refused operation
Resent-From: Ricardo Wurmus <rekado@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 30 Nov 2018 03:48:02 +0000
Resent-Message-ID: <handler.33165.B33165.15435496523740 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Chris Marusich <cmmarusich@HIDDEN>
Cc: Henk Katerberg <henk.katerberg@HIDDEN>, 33165 <at> debbugs.gnu.org
References: <743863752d3942c2a73477794d223b9b@HIDDEN>
 <87d0qncojz.fsf@HIDDEN>
User-agent: mu4e 1.0; emacs 26.1
From: Ricardo Wurmus <rekado@HIDDEN>
In-reply-to: <87d0qncojz.fsf@HIDDEN>
Date: Fri, 30 Nov 2018 04:46:30 +0100
Message-ID: <87a7lr2pnt.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>


Chris Marusich <cmmarusich@HIDDEN> writes:

> The version of GNOME currently packaged in Guix is 3.24.3 (see
> gnu/packages/gnome.scm).  Because GNOME Keyring just wrap's OpenSSH's
> ssh-agent starting with GNOME 3.28, it seems likely that upgrading to
> GNOME 3.28 or later will fix your issue.  If your problem continues to
> occur even after Guix has upgraded GNOME to 3.28 or later, then we will
> need to investigate more.

Just FYI: we have an upgrade to GNOME 2.28 on a separate branch that=E2=80=
=99s
waiting for the core-updates branch to be merged.

--=20
Ricardo

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.