Forum Discussion

Anonymous's avatar
Anonymous
3 years ago

Ability to specify which key to use (otherwise: Too many authentication failures)

I was perplexed as to why I could not SSH into a system earlier today. It looks like ssh is simply trying all of the keys in my vault, one after another, though never getting to the one it needs befo...
SSH
Anonymous's avatar
Anonymous
3 years ago

Hi All,

Saw this come up a few times that updating the ~/.ssh/config file with each new key sucks a bit. Did a little digging through the ssh-config manpage and discovered that many implementations of openSSH automatically expand some tokens at runtime. If you download the public-keys & save them using the hostname from 1Password you can save updating the ssh-config file each time by using something like:

Host *
IdentityAgent \\.\pipe\openssh-ssh-agent
IdentityFile D:/keys/%h.pub
IdentitiesOnly yes

A full list of usable tokens can be found here -- https://www.man7.org/linux/man-pages/man5/ssh_config.5.html#TOKENS

This _should _ remove one of the pain-points here until a method of passing through hostname information to the ssh-agent is made available.

Regards,

James