From 8672a6901a636bd0232a5eb6bd2d06051a44914a Mon Sep 17 00:00:00 2001 From: Roman Zeyde Date: Tue, 19 Jun 2018 18:49:36 +0300 Subject: [PATCH] Document IdentitiesOnly support --- doc/README-SSH.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/doc/README-SSH.md b/doc/README-SSH.md index 008c8a8..2f72a39 100644 --- a/doc/README-SSH.md +++ b/doc/README-SSH.md @@ -161,7 +161,7 @@ export SSH_AUTH_SOCK=$(systemctl show --user --property=Listen trezor-ssh-agent. If SSH connection fails to work, please open an [issue](https://github.com/romanz/trezor-agent/issues) with a verbose log attached (by running `trezor-agent -vv`) . -##### Incompatible SSH options +##### `IdentitiesOnly` SSH option Note that your local SSH configuration may ignore `trezor-agent`, if it has `IdentitiesOnly` option set to `yes`. @@ -172,6 +172,12 @@ Note that your local SSH configuration may ignore `trezor-agent`, if it has `Ide This option is intended for situations where ssh-agent offers many different identities. The default is “no”. -If you are failing to connect, try running: +If you are failing to connect, save your public key using: - $ trezor-agent -vv user@host -- ssh -vv -oIdentitiesOnly=no user@host + $ trezor-agent -vv foobar@hostname.com > ~/.ssh/hostname.pub + +And add the following lines to `~/.ssh/config` (providing the public key explicitly to SSH): + + Host hostname.com + User foobar + IdentityFile ~/.ssh/hostname.pub