1 c9d04e09 2005-02-14 devnull .TH SSH-AGENT 1
  2 c9d04e09 2005-02-14 devnull .SH NAME
  3 c9d04e09 2005-02-14 devnull ssh-agent \- SSH authentication agent
  4 c9d04e09 2005-02-14 devnull .SH SYNOPSIS
  5 c9d04e09 2005-02-14 devnull .B ssh-agent
  6 c9d04e09 2005-02-14 devnull [
  7 c9d04e09 2005-02-14 devnull .B -l
  8 c9d04e09 2005-02-14 devnull ]
  9 c9d04e09 2005-02-14 devnull .I factotum-service
 10 c9d04e09 2005-02-14 devnull .SH DESCRIPTION
 11 c9d04e09 2005-02-14 devnull .I Ssh-agent
 12 c9d04e09 2005-02-14 devnull presents
 13 c9d04e09 2005-02-14 devnull .IR factotum (4)
 14 c9d04e09 2005-02-14 devnull using the interface that
 15 c9d04e09 2005-02-14 devnull .IR ssh (1)
 16 c9d04e09 2005-02-14 devnull requires.
 17 c9d04e09 2005-02-14 devnull .PP
 18 c9d04e09 2005-02-14 devnull Once
 19 c9d04e09 2005-02-14 devnull .I ssh-agent
 20 c9d04e09 2005-02-14 devnull and
 21 c9d04e09 2005-02-14 devnull .I factotum
 22 c9d04e09 2005-02-14 devnull are running, the standard Unix SSH client
 23 c9d04e09 2005-02-14 devnull can use
 24 c9d04e09 2005-02-14 devnull .I ssh-agent
 25 c9d04e09 2005-02-14 devnull (and, indirectly,
 26 c9d04e09 2005-02-14 devnull .IR factotum )
 27 c9d04e09 2005-02-14 devnull to authenticate to remote systems using RSA or DSA keys.
 28 c9d04e09 2005-02-14 devnull .PP
 29 c9d04e09 2005-02-14 devnull .I Ssh
 30 c9d04e09 2005-02-14 devnull accesses
 31 c9d04e09 2005-02-14 devnull .I ssh-agent
 32 c9d04e09 2005-02-14 devnull via a Unix socket posted in a private subdirectory of
 33 c9d04e09 2005-02-14 devnull .B /tmp .
 34 c9d04e09 2005-02-14 devnull .I Ssh
 35 c9d04e09 2005-02-14 devnull expects this socket to be in the environment as
 36 c9d04e09 2005-02-14 devnull .BR $SSH_AGENT_SOCK ,
 37 c9d04e09 2005-02-14 devnull and expects the agent to be running with process id
 38 c9d04e09 2005-02-14 devnull .BR $SSH_AGENT_PID .
 39 c9d04e09 2005-02-14 devnull .I Ssh-agent
 40 c9d04e09 2005-02-14 devnull prints shell commands to set these two variables
 41 c9d04e09 2005-02-14 devnull before forking itself into the background.
 42 c9d04e09 2005-02-14 devnull It is typically invoked inside a shell
 43 c9d04e09 2005-02-14 devnull .B eval
 44 c9d04e09 2005-02-14 devnull construct; see the examples below.
 45 c9d04e09 2005-02-14 devnull The 
 46 c9d04e09 2005-02-14 devnull .B -e
 47 c9d04e09 2005-02-14 devnull option causes
 48 c9d04e09 2005-02-14 devnull .I ssh-agent
 49 c9d04e09 2005-02-14 devnull to include
 50 c9d04e09 2005-02-14 devnull .B export
 51 c9d04e09 2005-02-14 devnull commands to put the variables into the environment of future programs.
 52 c9d04e09 2005-02-14 devnull .PP
 53 c9d04e09 2005-02-14 devnull If the
 54 c9d04e09 2005-02-14 devnull .B -l
 55 c9d04e09 2005-02-14 devnull option is given, 
 56 c9d04e09 2005-02-14 devnull .I ssh-agent
 57 c9d04e09 2005-02-14 devnull lists the usable
 58 c9d04e09 2005-02-14 devnull .I factotum
 59 c9d04e09 2005-02-14 devnull keys in the standard SSH format, suitable for creating an
 60 c9d04e09 2005-02-14 devnull .B authorized_keys
 61 c9d04e09 2005-02-14 devnull file.
 62 c9d04e09 2005-02-14 devnull .PP
 63 c9d04e09 2005-02-14 devnull .I Ssh-agent
 64 c9d04e09 2005-02-14 devnull connects to
 65 c9d04e09 2005-02-14 devnull .I factotum
 66 c9d04e09 2005-02-14 devnull by accessing
 67 c9d04e09 2005-02-14 devnull .I factotum-service
 68 c9d04e09 2005-02-14 devnull (default
 69 c9d04e09 2005-02-14 devnull .RB ` factotum ')
 70 c9d04e09 2005-02-14 devnull in the current name space.
 71 c9d04e09 2005-02-14 devnull .PP
 72 c9d04e09 2005-02-14 devnull There is a Unix program called
 73 c9d04e09 2005-02-14 devnull .I ssh-agent
 74 c9d04e09 2005-02-14 devnull that manages SSH keys itself.
 75 c9d04e09 2005-02-14 devnull Invoke this one with
 76 c9d04e09 2005-02-14 devnull .B 9
 77 c9d04e09 2005-02-14 devnull .BR ssh-agent ;
 78 c9d04e09 2005-02-14 devnull see
 79 c9d04e09 2005-02-14 devnull .IR 9 (1).
 80 c9d04e09 2005-02-14 devnull .SH EXAMPLES
 81 c9d04e09 2005-02-14 devnull Assume
 82 c9d04e09 2005-02-14 devnull .IR factotum (4)
 83 c9d04e09 2005-02-14 devnull is already running and initialized with keys.
 84 c9d04e09 2005-02-14 devnull .PP
 85 c9d04e09 2005-02-14 devnull Start a new agent, copying the commands by hand:
 86 c9d04e09 2005-02-14 devnull .IP
 87 c9d04e09 2005-02-14 devnull .EX
 88 c9d04e09 2005-02-14 devnull $ 9 ssh-agent -e
 89 c9d04e09 2005-02-14 devnull SSH_AUTH_SOCK=/tmp/ssh-405795003d7ee27a/agent.4233;
 90 c9d04e09 2005-02-14 devnull export SSH_AUTH_SOCK;
 91 c9d04e09 2005-02-14 devnull SSH_AGENT_PID=4233;
 92 c9d04e09 2005-02-14 devnull export SSH_AGENT_PID;
 93 c9d04e09 2005-02-14 devnull $ SSH_AUTH_SOCK=/tmp/ssh-405795003d7ee27a/agent.4233;
 94 c9d04e09 2005-02-14 devnull $ export SSH_AUTH_SOCK;
 95 c9d04e09 2005-02-14 devnull $ SSH_AGENT_PID=4233;
 96 c9d04e09 2005-02-14 devnull $ export SSH_AGENT_PID;
 97 c9d04e09 2005-02-14 devnull $ 
 98 c9d04e09 2005-02-14 devnull .EE
 99 c9d04e09 2005-02-14 devnull .PP
100 c9d04e09 2005-02-14 devnull Start the agent from
101 c9d04e09 2005-02-14 devnull .IR sh (1):
102 c9d04e09 2005-02-14 devnull .IP
103 c9d04e09 2005-02-14 devnull .EX
104 c9d04e09 2005-02-14 devnull $ eval `9 ssh-agent -e`
105 c9d04e09 2005-02-14 devnull $ 
106 c9d04e09 2005-02-14 devnull .EE
107 c9d04e09 2005-02-14 devnull .PP
108 c9d04e09 2005-02-14 devnull Start the agent from
109 c9d04e09 2005-02-14 devnull .IR rc (1):
110 c9d04e09 2005-02-14 devnull .IP
111 c9d04e09 2005-02-14 devnull .EX
112 c9d04e09 2005-02-14 devnull % eval `{9 ssh-agent}
113 c9d04e09 2005-02-14 devnull % 
114 c9d04e09 2005-02-14 devnull .EE
115 c9d04e09 2005-02-14 devnull .PP
116 c9d04e09 2005-02-14 devnull Use the agent to connect to a remote system:
117 c9d04e09 2005-02-14 devnull .IP
118 c9d04e09 2005-02-14 devnull .EX
119 c9d04e09 2005-02-14 devnull % ssh tux
120 c9d04e09 2005-02-14 devnull tux% ^D
121 c9d04e09 2005-02-14 devnull % 
122 c9d04e09 2005-02-14 devnull .EE
123 c9d04e09 2005-02-14 devnull .SH SOURCE
124 c9d04e09 2005-02-14 devnull .B \*9/src/cmd/auth/ssh-agent.c
125 c9d04e09 2005-02-14 devnull .SH SEE ALSO
126 c9d04e09 2005-02-14 devnull .IR ssh (1),
127 c9d04e09 2005-02-14 devnull .IR rsa (1),
128 c9d04e09 2005-02-14 devnull .IR factotum (4)
129 c9d04e09 2005-02-14 devnull .SH BUGS
130 c9d04e09 2005-02-14 devnull A surprise rather than a bug:
131 c9d04e09 2005-02-14 devnull .I ssh-agent
132 c9d04e09 2005-02-14 devnull connects to factotum on demand, so it can be
133 c9d04e09 2005-02-14 devnull started before
134 c9d04e09 2005-02-14 devnull .I factotum
135 c9d04e09 2005-02-14 devnull is running and need not be restarted just because
136 c9d04e09 2005-02-14 devnull .I factotum
137 c9d04e09 2005-02-14 devnull is.