ssh server fails -- but allows key anyway.

Having the same issue.

Getting this issue on MacOS Monterey. Started the same day 1Pass asked for password re-authentication (which it will do every 20 days or so).

1Password for Mac 8.8.0 - 80800011, on BETA channel

Tried and didn't work:
- Deleting "GitHub" entries in known_hosts
- Re-authenticating GitHub-cli (still using same SSH key)
- Terminal doesn't make a difference, tried VSCode integrated as well as iTerm 2
- Tried updating GitHub-cli 2.4.0 -> 2.9.0
- Tried installing the 1Pass op CLI command.

If I run ssh -vvvT git@github.com

Parts that are possibly related (this isn't the entire output)

debug2: get_agent_identities: ssh_agent_bind_hostkey: agent refused operation
debug1: get_agent_identities: ssh_fetch_identitylist: agent contains no identities

and the last 30 or so lines:

debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /Users/chris/.ssh/id_rsa
debug3: no such identity: /Users/chris/.ssh/id_rsa: No such file or directory
debug1: Trying private key: /Users/chris/.ssh/id_ecdsa
debug3: no such identity: /Users/chris/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /Users/chris/.ssh/id_ecdsa_sk
debug3: no such identity: /Users/chris/.ssh/id_ecdsa_sk: No such file or directory
debug1: Trying private key: /Users/chris/.ssh/id_ed25519
debug3: no such identity: /Users/chris/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: /Users/chris/.ssh/id_ed25519_sk
debug3: no such identity: /Users/chris/.ssh/id_ed25519_sk: No such file or directory
debug1: Trying private key: /Users/chris/.ssh/id_xmss
debug3: no such identity: /Users/chris/.ssh/id_xmss: No such file or directory
debug1: Trying private key: /Users/chris/.ssh/id_dsa
debug3: no such identity: /Users/chris/.ssh/id_dsa: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
git@github.com: Permission denied (publickey).


Crap, I figured it out. When I logged in with my password I logged into one account, but the SSH key was on another account. I didn't realize this until I noticed I wasn't logged into all the accounts.

1Pass feedback - when you need to re-enter your password, make it easier to log into all accounts at once. Right now it gives you a single password field and logs into which ever account that happens to have that password.

@chris__hayes Thanks for the feedback. Glad you figured it out! The SSH agent currently doesn't work that well in 'partially locked' scenarios. This is something we're looking to improve.

@"a.jaffe" Do you see anything appear in the 1Password logs when you invoke the failing SSH command? On macOS: ~/Library/Group Containers/2BUA8C4S2C.com.1password/Library/Application Support/1Password/Data/logs/1Password_rCURRENT.log