Lines Matching full:agent

1 #	$OpenBSD: agent-restrict.sh,v 1.6 2023/03/01 09:29:32 dtucker Exp $
4 tid="agent restrictions"
6 SSH_AUTH_SOCK="$OBJ/agent.sock"
8 rm -f $SSH_AUTH_SOCK $OBJ/agent.log $OBJ/host_[abcdex]* $OBJ/user_[abcdex]*
93 		(printf "%s" "restrict,agent-forwarding,command=\"$_command\" ";
166 # Move the private key files out of the way to force use of agent-hosted keys.
181 	${SSHADD} -D > /dev/null 2>&1 || fatal "clear agent failed"
187 verbose "authentication w/o agent"
189 	expect_succeed $h "w/o agent"
192 	expect_succeed_key $h $wrongkey "\"wrong\" key w/o agent"
196 	expect_fail $h "w/o agent"
200 verbose "start agent"
201 ${SSHAGENT} ${EXTRA_AGENT_ARGS} -d -a $SSH_AUTH_SOCK > $OBJ/agent.log 2>&1 &
211 verbose "authentication with agent (no restrict)"
217 	expect_succeed $h "with agent"
220 	expect_succeed_key $h $wrongkey "\"wrong\" key with agent"
226 # List of keys from agent should contain everything.
237 verbose "authentication with agent (basic restrict)"
249 	expect_succeed $h "with agent"
252 verbose "authentication with agent incorrect key (basic restrict)"
256 	expect_fail_key $h $wrongkey "wrong key with agent (basic restrict)"
261 # List from forwarded agent should contain only user_x - the unrestricted key.
309 verbose "agent restriction honours certificate principal"
315 expect_fail d "restricted agent w/ incorrect cert principal"
334 echo AGENT
371 	echo "AGENT" >> $OBJ/expect_a
378 		echo "AGENT" >> $OBJ/expect_a
398 verbose "multihop without agent"
401 $MULTIHOP_RUN "" a b c d e > $OBJ/ssh_output || fail "multihop no agent ssh failed"
404 verbose "multihop agent unrestricted"
408 $MULTIHOP_RUN "" a b c d e > $OBJ/ssh_output || fail "multihop no agent ssh failed"
453 verbose "multihop cycle no agent"
457 	fail "multihop cycle no-agent fail"
460 verbose "multihop cycle agent unrestricted"
465 	fail "multihop cycle agent ssh failed"