{"id":423,"date":"2009-10-06T21:31:11","date_gmt":"2009-10-06T19:31:11","guid":{"rendered":"http:\/\/www.kill-9.it\/blog\/?p=423"},"modified":"2009-10-06T21:31:11","modified_gmt":"2009-10-06T19:31:11","slug":"snow-leopard-ssh-agent-and-an-everlasting-memory","status":"publish","type":"post","link":"https:\/\/www.kill-9.it\/blog\/index.php\/2009\/10\/06\/snow-leopard-ssh-agent-and-an-everlasting-memory\/","title":{"rendered":"Snow Leopard, ssh-agent and an everlasting memory"},"content":{"rendered":"

If you recently switched from an older (pre 10.6) version of OS X to the latest baby, and have the old habit of using ssh to connect around, you may have noticed a singular behaviour: while the older versions always asked you for a passphrase (you have<\/strong> a passphrase set on your private key, right?<\/em>) the new OS 10.6.x does it just the first time<\/strong> you use it.<\/p>\n

Now, no doubt it is handy and user-friendly and automagical and… but I feel it disturbing: if by chance I hand over the laptop to somebody for a quick glance at a web page, for example, she can use it to connect anywhere without my consent — ok, I’m oversimplifying, but you get the idea.<\/p>\n

The mistery lies into our old friend ssh-agent: it is spawn using
\n\/System\/Library\/LaunchAgents\/org.openbsd.ssh-agent.plist<\/code>
\n[on a single line for yout copying pleasure]<\/em> as a configuration file and it will cache your passphrase the first time you use ssh.
\nUp to here it’s fine.<\/p>\n

What is troublesome to me is that the default cache time is unlimited (see the man page, this is the default behaviour when it is launched without specifying a “-t” option) therefore it will never forget the passphrase until I logout — being the only user of my laptop, this does not happen often.<\/p>\n

Enter the joy of xml configuration files: edit the org.openbsd.ssh-agent.plist<\/code>, and add the option to your liking, that is change this
\n
\n<array>
\n<string>\/usr\/bin\/ssh-agent<\/string>
\n<string>-l<\/string>
\n<\/array>
\n<\/code>
\nto something like this
\n
\n<array>
\n<string>\/usr\/bin\/ssh-agent<\/string>
\n<string>-l<\/string>
\n<string>-t<\/string>
\n<string>120<\/string>
\n<\/array>
\n<\/code>
\nif a couple of minutes of “grace period” suit your usage.
\nThen, just kill the process — it will spawn again the next time you use ssh.<\/p>\n

[By the way:
\nDear Internet, posting code like the XML up here sucks big time.
\nIt took me more time to format the two snippets to render correctly then writing the whole post.
\nWhat do you use to ease this pain?
\nthank you.]<\/p>\n","protected":false},"excerpt":{"rendered":"

If you recently switched from an older (pre 10.6) version of OS X to the latest baby, and have the old habit of using ssh to connect around, you may have noticed a singular behaviour: while the older versions always asked you for a passphrase (you have a passphrase set on your private key, right?) … Continue reading “Snow Leopard, ssh-agent and an everlasting memory”<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,6,3,4],"tags":[],"class_list":["post-423","post","type-post","status-publish","format-standard","hentry","category-apple","category-english","category-geek","category-security"],"_links":{"self":[{"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/posts\/423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=423"}],"version-history":[{"count":38,"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/posts\/423\/revisions"}],"predecessor-version":[{"id":461,"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/posts\/423\/revisions\/461"}],"wp:attachment":[{"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kill-9.it\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}