ForwardAgent?

Hi
Same problem here.
Forwarding is not working with 1Password agent. I get a Permission denied (publickey). when trying to ssh on the second server.

Hi @spacehog:

Do you have IdentityAgent, SSH_AUTH_SOCK, or both configured to use the 1Password SSH agent on your local machine? Let me know!

Jack

Hi Jack,
I use IdentityAgent for 1Pasword. But I totally forgot I also have SSH_AUTH_LOCK that points to my keychain SSH agent. I guess I have to disable the keychain SSH agent before retrying.
I’ll tell you if it resolves my problem.

I'm trying to forward my 1Password SSH agent running on Windows 11, and when logging into my server it just hangs before showing a prompt. I can ^c and it cancels the connection, so it's probably also before a terminal is properly allocated?

Anyway, I honestly have no idea what's going on here, but I'm hoping someone might be able to let me know if this is some sort of bug or limitation, or if I have something set wrong on my server. Thank you!

@Jack I have made some progress.
I have a private key file for the second server, if I add it in 1Password, forwarding works.
But if I try to add it via ssh-add, I get an error:
Could not add identity "keys": agent refused operation

It's funny because ssh-add -l works well and lists all my private keys from 1Password.

The SSH_AUT_LOCK points to ~/.1password/agent.sock.

Here is the message I have found in 1Password logs:
Unsupported message sent to agent: AddIdentity

@Jack.P_1P Do you have an idea of what could cause the error message when using ssh-add?

Hi @spacehog:

Thanks for sharing that. Adding keys to the 1Password SSH agent can only be done directly from 1Password, not by using ssh-add. With that said, we have an internal issue tracking being unable to use ssh-add to import keys into 1Password, so I'll share your feedback with the team.

ref: dev/core/core#13363

@br_:

We'd likely have to take a closer look at your specific setup. Please email us at businesssupport@1password.com mentioning that you're having trouble with SSH forwarding, and we'll be in touch.

Jack

same here, forwarding don't work anymore when ssh'ing from another machine into this one until you comment out the IdentityAgent line


Host *
ForwardAgent yes
IdentityAgent "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"

(I login from 1 MacBook Air to another pro, both have 1pw)

Hi @proza:

Thanks for sharing. We're continuing to investigate how we can make this smoother when connecting to a host that also has 1Password SSH Agent enabled, so thanks for your feedback!

Jack