NAME

ssh-agent - SSH authentication agent

SYNOPSIS

ssh-agent [ -l ] factotum-service

DESCRIPTION

Ssh-agent presents using the interface that requires.

Once ssh-agent and factotum are running, the standard Unix SSH client can use ssh-agent (and, indirectly, factotum) to authenticate to remote systems using RSA or DSA keys.

Ssh accesses ssh-agent via a Unix socket named ssh-agent.socket in the name space directory (see Note that although the socket is posted in the name space directory, it is not for 9P conversations. Ssh expects the name of this socket to be in the environment as $SSH_AGENT_SOCK, and expects the agent to be running with process id $SSH_AGENT_PID. Ssh-agent prints shell commands to set these two variables before forking itself into the background. It is typically invoked inside a shell eval construct; see the examples below. The -e option causes ssh-agent to include export commands to put the variables into the environment of future programs.

If the -l option is given, ssh-agent lists the usable factotum keys in the standard SSH format, suitable for creating an authorized_keys file.

Ssh-agent connects to factotum by accessing factotum-service (default `factotum') in the current name space.

There is a Unix program called ssh-agent that manages SSH keys itself. Invoke this one with 9 ssh-agent; see

EXAMPLES

Assume is already running and initialized with keys.

Start a new agent, copying the commands by hand:

$ 9 ssh-agent -e
SSH_AUTH_SOCK=/tmp/ssh-405795003d7ee27a/agent.4233;
export SSH_AUTH_SOCK;
SSH_AGENT_PID=4233;
export SSH_AGENT_PID;
$ SSH_AUTH_SOCK=/tmp/ssh-405795003d7ee27a/agent.4233;
$ export SSH_AUTH_SOCK;
$ SSH_AGENT_PID=4233;
$ export SSH_AGENT_PID;
$

Start the agent from

$ eval `9 ssh-agent -e`
$

Start the agent from

% eval `{9 ssh-agent}
%

Use the agent to connect to a remote system:

% ssh tux
tux% ^D
%

SOURCE

/src/cmd/auth/ssh-agent.c

BUGS