Skip to main content
March 16, 2022
Question

SSH - 'Agent Refused Operation'

  • March 16, 2022
  • 41 replies
  • 18543 views

I was able to enable the ssh agent in the 1 password app.

I now have a problem with accessing an EC2 instance using a private key stored in my private vault.

Steps:

  1. Update ~/.ssh/config with a host i.e.

Host random-host
HostName random-host.com
User ec2-user
IdentityAgent "~/Library/Group Containers/2BUA8GG42C.com.1password/t/agent.sock"

  1. Try to ssh to random-host

1password app prompts to 'Allow Access'

  1. This results in:

sign_and_send_pubkey: signing failed for RSA "random-host" from agent: agent refused operation
ec2-user@random-host.com: Permission denied (publickey)

  1. When I list all of the keys available to the agent:

ssh-add -l

The agent has no identities.

Can you help? Not sure which steps I have missed?

Also, I have tried to contact support via email and the response is poor at best. The one response I did get had a link to a support ticket. When I try to view it I'm prompted for my 1pwd credentials. Try to login and it fails. Not sure if I need another 1pwd account to access your support platform? Frustrating.

Thanks, Matt


1Password Version: 8.6.0 BETA
Extension Version: Not Provided
OS Version: macOS 12.0.1

41 replies

June 14, 2022

Thanks @XIII! Azure DevOps is definitely on our radar

June 14, 2022

Hello @"Marton.Soos_1P" , all EC2 services with Ubuntu 14.04 with the following specs:

Kernel: 3.13.0-24-generic
OpenSSH_6.6.1p1 Ubuntu-2ubuntu2, OpenSSL 1.0.2g 1 Mar 2016
host key algorithms: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256

June 21, 2022

Embedded Systems with OpenWRT 19.07 and dropbear SSH Server only supports ssh-rsa
It's used for Freifunk Access-Points like the ones from FreiFunk-München http://www.ffmuc.net

Is there any Roadmap or timeline for extending the supported ciphers/algorithm of the Agent feature in 1 Password 8 ?

June 24, 2022

@floris_1P run into the same problem. Can you guys, please document this problem in 1password docs? It cost me half a day to figure it out. And please add this feature! 🙏

floris_1P
1Password Employee
August 26, 2022

@mattcooper @dacodev @jamie_shaw @billwu @ark0n3 @regis13 @tybritten @gussic @muc81 @sidesaddle @biniblublu @lupiano @Andreas12345 @Cyb3rFl3x Happy to announce that the latest 1Password beta now supports ssh-rsa connections!

August 26, 2022

Thanks!

August 26, 2022

@floris_1P great news! Thanks!

August 26, 2022

Super!!!

August 26, 2022

Sweet! Thanks for following up!

August 27, 2022

Great!