pa8mm.net

User Tools

Site Tools

Trace:
linux:ssh

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
linux:ssh [2026/05/18 15:05] – [PUBLIC KEY AUTHENTICATION] v1ctorlinux:ssh [2026/05/18 15:07] (current) – [PUBLIC KEY AUTHENTICATION] v1ctor
Line 9: Line 9:
 How it works: How it works:
   - Agent starts as a background process, listening on a unix socket. Its path is exported as $SSH_AUTH_SOCK.   - Agent starts as a background process, listening on a unix socket. Its path is exported as $SSH_AUTH_SOCK.
 +  - You run ssh-add <key> once — passphrase prompt, decrypted key goes into agent memory.
   - When ssh connects somewhere, it checks $SSH_AUTH_SOCK, asks the agent for available keys, and asks the agent to sign the server's challenge.   - When ssh connects somewhere, it checks $SSH_AUTH_SOCK, asks the agent for available keys, and asks the agent to sign the server's challenge.
-  + 
 +With agent **forwarding** (ssh -A bastion, or ForwardAgent yes in config), SSH forwards $SSH_AUTH_SOCK from your laptop into the bastion shell. When you then run ssh internal-server from the bastion. 
 + 
 +=== SSH KEYS ====
  
 SSH keeys come in pairs: SSH keeys come in pairs:
linux/ssh.1779116750.txt.gz · Last modified: by v1ctor