I am trying to use SSH Agent Forwarding to configure a deploy script on CentOS. I have a public key copied into the
authorized_keys file in
~/.ssh of my
deploy user on machine
server. I am successfully able to log into the server with the deploy user without a password prompt (and the deploy user's password is locked e.g.
passwd -l deploy).
Keep in mind that my .ssh directory only contains the authorized_keys file:
deploy@server $ ls authorized_keys
Now I need the deploy user to gain access to my git repository from the server. The solution is SSH Agent Forwarding. I should be able to access the repository via the server by performing the following operation on the server:
# List SSH keys that are loaded into the agent deploy@server $ ssh-add -l # Make sure they key is loaded if 'ssh-add -l' didn't show anything deploy@server $ ssh-add deploy@server $ ssh -A firstname.lastname@example.org 'git ls-remote email@example.com:capistrano/rails3-bootstrap-devise-cancan.git'
The problem is ssh-add fails to load the key:
deploy@server $ exec ssh-agent bash deploy@server $ ssh-add -l The agent has no identities. deploy@server $ ssh-add deploy@server $ echo $? => 1
It prints 1. That means there was a problem. I am a little confused because the documentation states we can use SSH agent forwarding, so I assume we don't need a id_rsa (private key) in deploy's .ssh directory. I just copied the public key from local machine into server's authorized_keys file and then I should be able to use SSH Agent Forwarding to authenticate the git repository. Yet, it seems that ssh-add requires that a private key exist. The documentation never mentioned I had to create a private key on my server.
Where am I going wrong?