Welcome to the VanDyke Software Forums

Join the discussion today!


Go Back   VanDyke Software Forums > General

Reply
 
Thread Tools Display Modes
  #1  
Old 02-14-2021, 05:22 AM
u49443 u49443 is offline
Registered User
 
Join Date: Feb 2021
Posts: 2
External key agent and VANDYKE_SSH_AUTH_SOCK

Hello,

reading the documentation and trying to find information on the support of external key agent on Windows (Pageant, Windows OpenSSH agent (https://docs.microsoft.com/en-us/win..._keymanagement / https://devblogs.microsoft.com/power...s-server-1709/), KeeAgent, ...), I couldn't find that it's supported (https://forums.vandyke.com/showthread.php?t=12440), but I found VANDYKE_SSH_AUTH_SOCK mentioned once somewhere.

By setting the environment variable VANDYKE_SSH_AUTH_SOCK=\\.\pipe\openssh-ssh-agent, I'm able to list the keys contained in the agent, but trying to connect an host, SecureCRT connection hangs when trying to use publickeys. Using ioninja I found the error "All pipe instances are busy." is returned when connecting the pipe ; after this the agent is trying to respond/connect, but too late maybe? (As you can see, I know very little about Windows pipes ). It seems odd since the listing is working fine.

I have traces from IOninja if you want/need, basically it's:
Client file opened > Cannot open client file (All pipe instances are busy.) > Server file opened
and when listing keys:
Client file opened, send 00 00 00 01 0b, Server file opened, send 00 00 01 26 0c + keys

It looks like compatibility with the included OpenSSH agent in Windows is very close to be possible, is it planned / could you implement that so external agents like KeeAgent could be used?

Best,
Alexandre
Reply With Quote
  #2  
Old 02-15-2021, 11:31 AM
jdev's Avatar
jdev jdev is offline
VanDyke Technical Support
 
Join Date: Nov 2003
Location: Albuquerque, NM
Posts: 1,096
Hello Alexandre,

Here are some points of clarification that may help to explain why you are seeing the behavior you reported:
  • SSH_AUTH_SOCK is what OpenSSH uses.
  • VANDYKE_SSH_AUTH_SOCK is what VanDyke Software products use on the Windows platform.
  • VANDYKE_SSH_AUTH_SOCK (named in such a way as to not imply interoperability with or collide with SSH_AUTH_SOCK) is not interoperable with SSH_AUTH_SOCK.
I've captured feature requests on your behalf for SecureCRT to either use KeePass directly or by leveraging the OpenSSH agent on Windows.

I don't have any ETA as to if/when such might ever be implemented, but if either of these features become available we will be happy to post news of it here.

Quote:
I found VANDYKE_SSH_AUTH_SOCK mentioned once somewhere
Where did you see any mention of VANDYKE_SSH_AUTH_SOCK?


--Jake
__________________
Jake Devenport
VanDyke Software
Technical Support
YouTube Channel: https://www.youtube.com/vandykesoftware
Email: support@vandyke.com
Web: https://www.vandyke.com/support
Reply With Quote
  #3  
Old 02-19-2021, 03:29 PM
u49443 u49443 is offline
Registered User
 
Join Date: Feb 2021
Posts: 2
Quote:
Originally Posted by jdev View Post
VANDYKE_SSH_AUTH_SOCK (named in such a way as to not imply interoperability with or collide with SSH_AUTH_SOCK) is not interoperable with SSH_AUTH_SOCK.[/LIST]
Yes this is clear, sorry if I let understand confusion, I was just trying to make it work with a normal agent hoping it would work (which is partially true).

Quote:
Originally Posted by jdev View Post
I've captured feature requests on your behalf for SecureCRT to either use KeePass directly or by leveraging the OpenSSH agent on Windows.

I don't have any ETA as to if/when such might ever be implemented, but if either of these features become available we will be happy to post news of it here.
Thank you, I hope you'll be able to implement this. Please note that KeeAgent is able to act like the new native Windows OpenSSH agent (ie. serve a named pipe at the same location), not just like Pageant.

Quote:
Originally Posted by jdev View Post
Where did you see any mention of VANDYKE_SSH_AUTH_SOCK?
Not anywhere on Vandyke documentations , but somewhere on the Internet, software claiming to be compatible with SecureCRT (which doesn't seems to work actually).
Reply With Quote
Reply

Tags
agent , external , interoperability , openssh


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 08:22 PM.