glTail on OSX doesnt support SSH keys with a password set

[stuarthopkins]

Just tried using glTail on OSX and have found that it wont connect to systems where the SSH key is password-protected. Initially it was failing on ssh-askpass not being present, however even after using a common OSX script to provide that functionality I am getting the following error:

UNKNOWN:[/bin/bash: /usr/libexec/ssh-askpass: Operation not permitted

The ssh-askpass script is executable and has the correct permissions (its accessible by any user on the system), so I am not sure what is triggering the OMP error.

[Fudge]

It's the sandboxing of apps distributed via the app store. I can as Apple
for an exception, but don't get your hopes up. Unfortunately I gave up on
the whole askpass problem on OSX, never could get it to work from the
sandbox.

On Sat, Aug 17, 2013 at 3:04 AM, Stuart Hopkins [email protected]:

Just tried using glTail on OSX and have found that it wont connect to
systems where the SSH key is password-protected. Initially it was failing
on ssh-askpass not being present, however even after using a common OSX
script to provide that functionality I am getting the following error:

UNKNOWN:[/bin/bash: /usr/libexec/ssh-askpass: Operation not permitted

The ssh-askpass script is executable and has the correct permissions (its
accessible by any user on the system), so I am not sure what is triggering
the OMP error.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/25
.

[kgbvax]

And now what? Is there a workaround?

[yannickmcosta]

I am also in the same situation, spend £7.99 on glTail and have to pretty much rewrite all my ssh stuff to get an error that says I cant do it in the first place? If it doesn't work why is it still on the App Store?

[Fudge]

What doesn't work? As long as the the key isn't password protected, it
should work fine.

On Fri, Feb 13, 2015 at 12:29 PM, Yannick McCabe-Costa <
[email protected]> wrote:

I am also in the same situation, spend £7.99 on glTail and have to pretty
much rewrite all my ssh stuff to get an error that says I cant do it in the
first place? If it doesn't work why is it still on the App Store?

—
Reply to this email directly or view it on GitHub
#25 (comment).

[yannickmcosta]

After re-pushing all my ssh keys and installing ssh-askpass, when running glTail, it still ask for permission to access the /Users/user_name/.ssh/id_rsa and asks for the passphrase for that file. From a terminal session, I can ssh into my servers without using passwords as I have pushed all the keys, however glTail is asking for access to the key files, which it should technically be asking permission for via Keychain, due to how Apple have reworked the Keychain. Having no password protection on a private key is also probably not the best idea...

[Fudge]

Not having a password on the private key is not the best idea, but it's the
only way I was able to make it work while being locked into the jail
enforced by the mac app store. If you ping me at [email protected] I'll get you
sorted with a copy that doesn't rely on the app store for distribution, and
can talk to both ssh-agent and ssh-askpass.

On Fri, Feb 13, 2015 at 12:39 PM, Yannick McCabe-Costa <
[email protected]> wrote:

After re-pushing all my ssh keys and installing ssh-askpass, when running
glTail, it still ask for permission to access the
/Users/user_name/.ssh/id_rsa and asks for the passphrase for that file.
From a terminal session, I can ssh into my servers without using passwords
as I have pushed all the keys, however glTail is asking for access to the
key files, which it should technically be asking permission for via
Keychain, due to how Apple have reworked the Keychain. Having no password
protection on a private key is also probably not the best idea...

—
Reply to this email directly or view it on GitHub
#25 (comment).