Hacker News Reader

Comment by nulltype | Hacker News Reader

If you have a mac (Yosemite), it looks like you want to add " UseRoaming no" under the "Host *" line in /etc/ssh_config (as root). You can test it before and after with this:

ssh -v -T git@github.com 2>&1 | grep Roaming

debug1: Roaming not allowed by server <- bad

ssh -v -T git@github.com 2>&1 | grep Roaming

(no output is good)

View on HN

On El Capitan the file is /etc/ssh/ssh_config

On Mountain Lion it's /private/etc/ssh_config.

/etc points to /private/etc on OS X, so it's all good.

A few of my friends found multiple copies of ssh_config lying around, so I wrote this one-liner that looks at 3 separate known ssh_config files & patches any vulnerable ones that it finds.

$ for SSH_CONF in /etc/ssh/ssh_config /etc/ssh_config /private/etc/ssh_config; do [ -f $SSH_CONF ] && ! grep -q 'UseRoaming no' $SSH_CONF && echo "Patching $SSH_CONF" && echo -e '\nHost *\n UseRoaming no' | sudo tee -a $SSH_CONF > /dev/null; done

Here is a user-friendly script that will disable UseRoaming on your os x computer. If you want to send this out to your coworkers, remind them that they have to right-click and choose open to execute a .command script (unless they have "allow apps downloaded from anywhere" enabled)

https://gist.github.com/logicalmethods/49f42190406667cbbbee

Interestingly I haven't been able to get the Roaming not allowed message to show on my client with or without the config option set.

Did you copy the whole line as "g ssh -v -T git@github.com 2>&1 | grep "Roaming debug1: Roaming not allowed by server"" ?

I misread GP's command and made that mistake. The correct command is :

ssh -v -T git@github.com 2>&1 | grep "Roaming"

My bad, the comment system stripped my newlines. Fixed the post.

It looks like arch just got the fix in really quick. I didn't recall updating my box this morning but I must have, because I already had the patched version in place.

Reply on news.ycombinator.com