Re: ssh-agent and limitation of number of keys

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 04/24/04

  • Next message: Darren Tucker: "Re: Very slow login on high load"
    Date: Sat, 24 Apr 2004 02:46:08 +0000 (UTC)
    
    

    In article <c6b57d$1974$1@news.vol.cz>,
    oldfrog@volny.cz <oldfrog@volny.cz> wrote:
    >is there some limitation of number of keys
    >simultaneously loaded into ssh-agent?

    No, but there is usually a limit on the number of authentication attempts
    a server will permit before disconnecting. For OpenSSH, this is currently
    hard-coded as 6 attempts.

    > I loaded
    >9 keys and 8. and 9. key don't work. I obtain
    >messege
    >
    > Received disconnect from X.X.X.X: 2: \
    > Too many authentication failures for root
    >
    >when i try to login. When I load these two keys
    >separate, all works fine.

    If you're using OpenSSH, you can use the IdentityFile and IdentitiesOnly
    directives in ssh_config or $HOME/.ssh/config to try only the right keys
    for each host.

    -- 
    Darren Tucker (dtucker at zip.com.au)
    GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
        Good judgement comes with experience. Unfortunately, the experience
    usually comes from bad judgement.
    

  • Next message: Darren Tucker: "Re: Very slow login on high load"

    Relevant Pages

    • RE: [USN-612-2] OpenSSH vulnerability
      ... The update for Ubuntu 8.04 was as ... (part of the ssh-server install was a blacklist of keys not to use). ... particularly affects the use of encryption keys in OpenSSH. ... amd64 architecture: ...
      (Ubuntu)
    • [Full-disclosure] [USN-612-2] OpenSSH vulnerability
      ... particularly affects the use of encryption keys in OpenSSH. ... Ubuntu) are based on Debian. ... amd64 architecture: ...
      (Full-Disclosure)
    • [USN-612-2] OpenSSH vulnerability
      ... particularly affects the use of encryption keys in OpenSSH. ... Ubuntu) are based on Debian. ... amd64 architecture: ...
      (Bugtraq)
    • Institutional OpenSSH Key Deployment -- How?
      ... and various SSH FAQs for, and haven't come up with very much, so I -do- ... we're trying to encourage people to use public keys and passphrases ... OpenSSH is that there aren't any particularly obvious ways to distribute ... We have an institutional LDAP user directory, ...
      (comp.security.ssh)
    • Re: question regarding SSH and interoperability with PKI
      ... OpenSSH read user identity and server host keys from files in PEM format. ... After this is good to create OpenSSH public key - command is: ...
      (SSH)