Skip to main content
February 18, 2022
Question

[wayland] signign failed: agent refused operation

  • February 18, 2022
  • 17 replies
  • 1976 views

After enabling the ssh agent (with or without the key name option) and editing ~/.ssh/config, I tried the suggested command and got the following output (without any prompt from 1password). 1password was running with an open window and unlocked.


$ ssh -T git@github.com
sign_and_send_pubkey: signing failed for ED25519 "" from agent: agent refused operation
git@github.com: Permission denied (publickey).

Here's a truncated snippet from the verbose output that indicated that git was indeed getting the key from 1password.


$ ssh -T git@github.com -vvv
...
debug1: Reading configuration data /home/andrea/.ssh/config
debug1: /home/andrea/.ssh/config line 1: Applying options for *
...
debug1: Will attempt key: ED25519 SHA256:u+azOc2MbA21U3SSq2Lj768c6ApkOV5f9wCmnPLLFkc agent
...
debug1: Offering public key: ED25519 SHA256:u+azOc2MbA21U3SSq2Lj768c6ApkOV5f9wCmnPLLFkc agent
...
debug1: Server accepts key: ED25519 SHA256:u+azOc2MbA21U3SSq2Lj768c6ApkOV5f9wCmnPLLFkc agent
debug3: sign_and_send_pubkey: ED25519 SHA256:u+azOc2MbA21U3SSq2Lj768c6ApkOV5f9wCmnPLLFkc
debug3: sign_and_send_pubkey: signing using ssh-ed25519 SHA256:u+azOc2MbA21U3SSq2Lj768c6ApkOV5f9wCmnPLLFkc
sign_and_send_pubkey: signing failed for ED25519 "" from agent: agent refused operation
...
git@github.com: Permission denied (publickey).

Some information about my sistem:

  • os: archlinux
  • kernel: linux 5.16.9
  • wayland compositor: river 0.2.0-dev-8943307
  • 1password version: 8.6.0_6.BETA-6
  • openssh version: 8.8p1
  • git version: 2.35.1

1Password Version: 8.6.0_6.BETA-6
Extension Version: Not Provided
OS Version: linux 5.16.9

17 replies

February 28, 2022

@floris_1P is this the same as building from git? I'm supposedly on the latest version (80600043, on BETA channel) and this is still not fixed, I can't see the release channel in Arch though.

March 3, 2022

After the update to 8.6.0_51.BETA-51 the behaviour is back to the one of the first post.
The only difference is that now the username@hostname is correctly shown in the error:


$ ssh -T git@github.com
sign_and_send_pubkey: signing failed for ED25519 "lupolucio@spettro" from agent: agent refused operation
git@github.com: Permission denied (publickey).

After seeing another post I've tried the following:


$ ssh-add -l
Could not open a connection to your authentication agent.

March 13, 2022

With the 8.6.0_68.BETA-68 update it now works correctly.
Thank you very much for the support.

March 26, 2022

It worked for me after removing github entry from ~/.ssh/known_hosts

mjec
April 18, 2022

It looks like this issue is back with 1Password 8.7.0-49.BETA and OpenSSH_9.0p1, OpenSSL 1.1.1n 15 Mar 2022. Explicitly specifying an identity (ssh -i) works around it for me.

floris_1P
1Password Employee
April 19, 2022

@mjec So you're seeing agent refused operation on every SSH request? If so, do you see anything in the 1Password logs appear when you run a failing SSH command? On Linux: $HOME/.config/1Password/logs.

Or could it be that you're seeing Too many authentication failures?

mjec
April 19, 2022

Thanks for the speedy response @floris_1P! I was seeing agent refused operation but that appears to have gone away today. Apologies for the false alarm. I think something was wrong with my polkit setup.