[OpenIndiana-discuss] Latest /hipster update problem (cannot remove network/ssh-askpass/zenity package)

[Predrag Zečević - Technical Support Analyst]

Hi all,

about one hour ago, I have update BE (saw FF update). Then I wanted to
remove network/ssh-askpass/zenity (looks like it is not usable, but did
not analyzed it properly) and got this error:


$ pfexec pkg uninstall -v pkg://openindiana.org/network/ssh-askpass/zenity
Creating Plan (Solver setup): /
pkg uninstall: Package service/network/ssh must be uninstalled before
the requested operation can be performed.
Reject: pkg://openindiana.org/service/network/***@7.4.0.1-2017.0.0.3
Reason: No version matching 'require' dependency network/ssh can be
installed
----------------------------------------
Reject: pkg://openindiana.org/network/***@7.4.0.1-2017.0.0.3
Reason: No version matching 'conditional' dependency
network/ssh-askpass can be installed
----------------------------------------
Reject: pkg://openindiana.org/network/ssh-***@1.0-2017.0.0.0
Reason: No version matching 'conditional' dependency
network/ssh-askpass/zenity can be installed
----------------------------------------
Reject:
pkg://openindiana.org/network/ssh-askpass/***@1.0-2017.0.0.0
Reason: This version rejected by user request
----------------------------------------
----------------------------------------
----------------------------------------
Package archiver/gnu-tar must be uninstalled before the requested
operation can be performed.
Reject: pkg://openindiana.org/archiver/gnu-***@1.29-2017.0.0.0
Reason: No version matching 'require' dependency
network/***@7.2.0.2-2017.0.0.4 can be installed
Package network/ssh must be uninstalled before the requested operation
can be performed.
Reject: pkg://openindiana.org/network/***@7.4.0.1-2017.0.0.3
Reason: [already rejected; see above]
Package network/ssh-askpass must be uninstalled before the requested
operation can be performed.
Reject: pkg://openindiana.org/network/ssh-***@1.0-2017.0.0.0
Reason: [already rejected; see above]
Package metapackages/build-essential must be uninstalled before the
requested operation can be performed.
Reject:
pkg://openindiana.org/metapackages/build-***@1.0-2017.0.0.9
Reason: No version matching 'require' dependency archiver/gnu-tar
can be installed

This package is not crucial for functionality, so it is maybe/probably
related to REQUIRED_PACKAGES recent changes.

Regards.
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH

tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
e-mail: ***@2e-systems.com

headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden am
Taunus, Germany
registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas

http://www.2e-systems.com/ - Making your business fly!

[Predrag Zečević - Technical Support Analyst]

Post by Predrag Zečević - Technical Support Analyst
Hi all,
about one hour ago, I have update BE (saw FF update). Then I wanted to
remove network/ssh-askpass/zenity (looks like it is not usable, but

ssh depends on ssh-askpass if xserver-common is installed.
ssh-askpass depends on ssh-askpass/zenity if zenity is installed.
So, if you have zenity, ssh and xserver-common installed, you need
ssh-askpass/zenity in your system :)

OK,
accepting explanation, but it looks like I do not understand its use
properly...

When I log-in to OI MATE (for example after update of BE and reboot),
ssh-askpas zenity pops-up and asks for key password (I would expect that
it will be saved to keystore).

As soon as I try to do ssh to some box, another window pops-up ans ask
fo key password.

Where I am making mistake?

With best regards.
Predrag Zečević
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH

tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
e-mail: ***@2e-systems.com

headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden am
Taunus, Germany
registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas

http://www.2e-systems.com/ - Making your business fly!

[Jim Klimov]

Post by Predrag Zečević - Technical Support Analyst

On 25.01.2018 18:55, Predrag Zečević - Technical Support Analyst

Post by Predrag Zečević - Technical Support Analyst
Hi all,
about one hour ago, I have update BE (saw FF update). Then I wanted

to

Post by Predrag Zečević - Technical Support Analyst
remove network/ssh-askpass/zenity (looks like it is not usable, but

ssh depends on ssh-askpass if xserver-common is installed.
ssh-askpass depends on ssh-askpass/zenity if zenity is installed.
So, if you have zenity, ssh and xserver-common installed, you need
ssh-askpass/zenity in your system :)

OK,
accepting explanation, but it looks like I do not understand its use
properly...
When I log-in to OI MATE (for example after update of BE and reboot),
ssh-askpas zenity pops-up and asks for key password (I would expect that
it will be saved to keystore).
As soon as I try to do ssh to some box, another window pops-up ans ask
fo key password.
Where I am making mistake?
With best regards.
Predrag Zečević
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH
tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden am
Taunus, Germany
registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas
http://www.2e-systems.com/ - Making your business fly!
_______________________________________________
openindiana-discuss mailing list
https://openindiana.org/mailman/listinfo/openindiana-discuss

Interesting ... I upgraded recently, and see this behavior too. It worked with code from a couple of months back, so something recent broke it.

I'd prefer have this restored, so I type my keypass once while preparing the session to work, and not get hiccups to enter keys when I actually do get to (net-)work...

Jim
--
Typos courtesy of K-9 Mail on my Android

[Jim Klimov]

On January 26, 2018 9:18:33 AM UTC, "Predrag Zečević - Technical

Post by Predrag Zečević - Technical Support Analyst

On 25.01.2018 18:55, Predrag Zečević - Technical Support Analyst

Post by Predrag Zečević - Technical Support Analyst
Hi all,
about one hour ago, I have update BE (saw FF update). Then I wanted

to

Post by Predrag Zečević - Technical Support Analyst
remove network/ssh-askpass/zenity (looks like it is not usable, but

ssh depends on ssh-askpass if xserver-common is installed.
ssh-askpass depends on ssh-askpass/zenity if zenity is installed.
So, if you have zenity, ssh and xserver-common installed, you need
ssh-askpass/zenity in your system :)

OK,
accepting explanation, but it looks like I do not understand its use
properly...
When I log-in to OI MATE (for example after update of BE and reboot),
ssh-askpas zenity pops-up and asks for key password (I would expect that
it will be saved to keystore).
As soon as I try to do ssh to some box, another window pops-up ans ask
fo key password.
Where I am making mistake?
With best regards.
Predrag Zečević
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH
tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden

am

Post by Predrag Zečević - Technical Support Analyst
Taunus, Germany
registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas
http://www.2e-systems.com/ - Making your business fly!
_______________________________________________
openindiana-discuss mailing list
https://openindiana.org/mailman/listinfo/openindiana-discuss

Interesting ... I upgraded recently, and see this behavior too. It
worked with code from a couple of months back, so something recent
broke it.
I'd prefer have this restored, so I type my keypass once while
preparing the session to work, and not get hiccups to enter keys when I
actually do get to (net-)work...
Jim
--
Typos courtesy of K-9 Mail on my Android
_______________________________________________
openindiana-discuss mailing list
https://openindiana.org/mailman/listinfo/openindiana-discuss

Hi,

I finally dug into the issue with details to be seen in OI IRC weblog.

The short outcome seems to be that the ssh-agent wraps the start of mate-session somehow, and as part of the session the gnome-keyring-daemon manager starts and hijacks the SSH_AUTH* envvars.

After some back and forth, I just did a `chmod -x /usr/bin/gnome-keyring*` and restarted X11 e.g. `systemctl restart lightdm` and got back the ssh-agent provided variables in env, so with my ~/.xsession including a

/usr/bin/ssh-add </dev/null &

to ask for key password as soon as I log in (not when I first want to use it), and with ssh-askpass-zenity being the default (symlinked) implementation of password input for the job, things again work as I'm used to ;)

I'd let someone smarter with X11 to figure out why gnome keyring manager is so rude when another ssh-agent is already active.

Nothing seems broken as result of a quick inspection, e.g. the applets which want root password (nwam....) still work.

Jim
--
Typos courtesy of K-9 Mail on my Android

[Predrag Zečević - Technical Support Analyst]

Post by Jim Klimov

On January 26, 2018 9:18:33 AM UTC, "Predrag Zečević - Technical

Post by Predrag Zečević - Technical Support Analyst

On 25.01.2018 18:55, Predrag Zečević - Technical Support Analyst

Post by Predrag Zečević - Technical Support Analyst
Hi all,
about one hour ago, I have update BE (saw FF update). Then I wanted

to

Post by Predrag Zečević - Technical Support Analyst
remove network/ssh-askpass/zenity (looks like it is not usable, but

ssh depends on ssh-askpass if xserver-common is installed.
ssh-askpass depends on ssh-askpass/zenity if zenity is installed.
So, if you have zenity, ssh and xserver-common installed, you need
ssh-askpass/zenity in your system :)

OK,
accepting explanation, but it looks like I do not understand its use
properly...
When I log-in to OI MATE (for example after update of BE and reboot),
ssh-askpas zenity pops-up and asks for key password (I would expect that
it will be saved to keystore).
As soon as I try to do ssh to some box, another window pops-up ans ask
fo key password.
Where I am making mistake?
With best regards.
Predrag Zečević
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH
tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden

am

Post by Predrag Zečević - Technical Support Analyst
Taunus, Germany
registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas
http://www.2e-systems.com/ - Making your business fly!
_______________________________________________
openindiana-discuss mailing list
https://openindiana.org/mailman/listinfo/openindiana-discuss

Interesting ... I upgraded recently, and see this behavior too. It
worked with code from a couple of months back, so something recent
broke it.
I'd prefer have this restored, so I type my keypass once while
preparing the session to work, and not get hiccups to enter keys when I
actually do get to (net-)work...
Jim
--
Typos courtesy of K-9 Mail on my Android
_______________________________________________
openindiana-discuss mailing list
https://openindiana.org/mailman/listinfo/openindiana-discuss

Hi,
I finally dug into the issue with details to be seen in OI IRC weblog.
The short outcome seems to be that the ssh-agent wraps the start of mate-session somehow, and as part of the session the gnome-keyring-daemon manager starts and hijacks the SSH_AUTH* envvars.
After some back and forth, I just did a `chmod -x /usr/bin/gnome-keyring*` and restarted X11 e.g. `systemctl restart lightdm` and got back the ssh-agent provided variables in env, so with my ~/.xsession including a
/usr/bin/ssh-add </dev/null &
to ask for key password as soon as I log in (not when I first want to use it), and with ssh-askpass-zenity being the default (symlinked) implementation of password input for the job, things again work as I'm used to ;)
I'd let someone smarter with X11 to figure out why gnome keyring manager is so rude when another ssh-agent is already active.
Nothing seems broken as result of a quick inspection, e.g. the applets which want root password (nwam....) still work.
Jim
--
Typos courtesy of K-9 Mail on my Android

Hi Jim, all,

I just have checked:

$ ps -ef | grep keyring
global predrag* 2249 1 0 13:12:40 ? 0:00
gnome-keyring-daemon --start

I could bet that this was earlier this line:
" /usr/bin/gnome-keyring-daemon --start --components=ssh "

Like it is mentioned in /etc/xdg/autostart/gnome-keyring-ssh.desktop file.
Why this suddenly ignores ""--components=ssh"" option is not clear to
me... Most likely file /etc/lightdm/lightdm.conf needs to activate some
option (there is no man page for it)

Thanks anyway for sharing your findings.

With best regards.
Predrag Zečević



Regards
--
Predrag Zečević
Technical Support Analyst
2e Systems GmbH

tel: +49 - 6196 - 95058 - 15
mob: +49 - 174 - 3109288
fax: +49 - 6196 - 95058 - 94
e-mail: ***@2e-systems.com

headquarter: 2e Systems GmbH, Koenigsteiner Str. 87, 65812 Bad Soden am
Taunus, Germany
registration: Amtsgericht Koenigstein (Germany), HRB 7303
managing director: Phil Douglas

http://www.2e-systems.com/ - Making your business fly!