Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
devinwyatt
1 month agoNew Contributor
SSH Agent Permission Denied for Multiple User Accounts on Same Machine
Hi, I think this is basically the same issue reported here (but not resolved): SSH Agent Permission Denied for Multiple Users on the same machine over RDP | 1Password Community but without the RDP a...
- 1 month ago
I just wanted to follow this up with the answer I got from support and why this is a known issue that isn't going to be solved.
Windows uses a hardcoded named pipe that persists across sessions and cannot be shared. This is why when you are setting up SSH Agent on Windows, there is a step to disable the OpenSSH service so that the pipe is freed up for 1Password to use. On Linux/Mac, UNIX sockets are used which allow multiple instances to co-exist and this is not an issue on those platforms.
They have considered a 1Password background service to act as traffic controller to the pipe for handling multiple instances of 1Password, but this introduces significant security problems that contradicts their strict per-user process isolation security model. They are not to say it would be impossible, but it does not sound like it is something they are pursuing at this time.
The only option is to make sure the pipe is freed up in one instance before trying to use it in another. This would mean signing out of User A before logging in as User B. Or fully quitting 1Password in User A before switching to User B. If both users are admins on the machine, then you could kill the other user's 1Password with an elevated script. None of these are ideal and they know that, but they're a bit stuck due to how Windows pipes work.
thecatfix
1 month agoDedicated Contributor
devinwyatt
Don't fall for the its windows fault. I run into same issue on MacOS and Linux.
If it's a known issue from the original post 3 years ago than that is the final straw. 1password Service Account workflow was not built for "solo=developers". I hope to god that they didn't develop the product as an upsell opportunity for loyal customers.
- devinwyatt1 month agoNew Contributor
Their explanation makes complete sense and I can imagine my use case here is a bit of an edge case. Am I disappointed? Absolutely. Do I buy their explanation? Yeah, it seems reasonable to me. Why would they lie to me about this? Am I going to stop using 1Password because of it? No.