Fixing SSH Agent Forwarding Without Exposing More Than Necessary
When forwarded SSH authentication fails, trace the socket, agent keys, server policy, and hop-by-hop configuration, then decide if forwarding is justified.
tag
5 posts
When forwarded SSH authentication fails, trace the socket, agent keys, server policy, and hop-by-hop configuration, then decide if forwarding is justified.
OpenSSH can reuse one authenticated transport for later sessions - configure a private control socket, bounded persistence, and explicit cleanup.
Turning on macOS's built-in SSH server correctly, then hardening it beyond the default configuration with key-based authentication and restricted access.
TUI apps render clipped over SSH, or the terminal doesn't rewrap after resizing - the remote shell has a stale idea of the terminal's actual dimensions.
A complete walkthrough generating an SSH key pair, deploying it correctly, and disabling password authentication safely - without locking yourself out.