Could not open a connection to your authentication agent windows

Did You Start ssh-agent?

You might need to start ssh-agent before you run the ssh-add command:

eval `ssh-agent -s`
ssh-add

Note that this will start the agent for msysgit Bash on Windows. If you’re using a different shell or operating system, you might need to use a variant of the command, such as those listed in the other answers.

See the following answers:

1. ssh-add complains: Could not open a connection to your authentication agent
2. Git push requires username and password (contains detailed instructions on how to use ssh-agent)
3. How to run (git/ssh) authentication agent?.
4. Could not open a connection to your authentication agent

To automatically start ssh-agent and allow a single instance to work in multiple console windows, see Start ssh-agent on login.

Why do we need to use eval instead of just ssh-agent?

SSH needs two things in order to use ssh-agent: an ssh-agent instance running in the background, and an environment variable set that tells SSH which socket it should use to connect to the agent (SSH_AUTH_SOCK IIRC). If you just run ssh-agent then the agent will start, but SSH will have no idea where to find it.

from this comment.

Public vs Private Keys

Also, whenever I use ssh-add, I always add private keys to it. The file ~/.ssh/id_rsa.pub looks like a public key, I’m not sure if that will work. Do you have a ~/.ssh/id_rsa file? If you open it in a text editor, does it say it’s a private key?

The following command worked for me. I am using CentOS.

exec ssh-agent bash

Could not open a connection to your authentication agent

To resolve this error:

bash:

$ eval `ssh-agent -s`

tcsh:

$ eval `ssh-agent -c`

Then use ssh-add as you normally would.

Hot Tip:

I was always forgetting what to type for the above ssh-agent commands, so I created an alias in my .bashrc file like this:

alias ssh-agent-cyg='eval `ssh-agent -s`'

Now instead of using ssh-agent, I can use ssh-agent-cyg

E.g.

$ ssh-agent-cyg
SSH_AUTH_SOCK=/tmp/ssh-n16KsxjuTMiM/agent.32394; export SSH_AUTH_SOCK;
SSH_AGENT_PID=32395; export SSH_AGENT_PID;
echo Agent pid 32395;
$ ssh-add ~/.ssh/my_pk

Original Source of fix:

http://cygwin.com/ml/cygwin/2011-10/msg00313.html

answered Jul 17, 2013 at 8:54

MsysGit or Cygwin

If you’re using Msysgit or Cygwin you can find a good tutorial at SSH-Agent in msysgit and cygwin and bash:

1. Add a file called .bashrc to your home folder.

2. Open the file and paste in:

   #!/bin/bash
   eval `ssh-agent -s`
   ssh-add
   

3. This assumes that your key is in the conventional ~/.ssh/id_rsa location. If it isn’t, include a full path after the ssh-add command.

4. Add to or create file ~/.ssh/config with the contents

   ForwardAgent yes
   

   In the original tutorial the ForwardAgent param is Yes, but it’s a typo. Use all lowercase or you’ll get errors.

5. Restart Msysgit. It will ask you to enter your passphrase once, and that’s it (until you end the session, or your ssh-agent is killed.)

Mac/OS X

If you don’t want to start a new ssh-agent every time you open a terminal, check out Keychain. I’m on a Mac now, so I used the tutorial ssh-agent with zsh & keychain on Mac OS X to set it up, but I’m sure a Google search will have plenty of info for Windows.

Update: A better solution on Mac is to add your key to the Mac OS Keychain:

ssh-add -K ~/.ssh/id_rsa

Simple as that.

answered Apr 9, 2012 at 17:43

Run

ssh-agent bash
ssh-add

To get more details you can search

ssh-agent

or run

man ssh-agent

answered Oct 11, 2018 at 2:26

ssh-add and ssh (assuming you are using the openssh implementations) require an environment variable to know how to talk to the ssh agent. If you started the agent in a different command prompt window to the one you’re using now, or if you started it incorrectly, neither ssh-add nor ssh will see that environment variable set (because the environment variable is set locally to the command prompt it’s set in).

You don’t say which version of ssh you’re using, but if you’re using cygwin’s, you can use this recipe from SSH Agent on Cygwin:

# Add to your Bash config file
SSHAGENT=/usr/bin/ssh-agent
SSHAGENTARGS="-s"
if [ -z "$SSH_AUTH_SOCK" -a -x "$SSHAGENT" ]; then
    eval `$SSHAGENT $SSHAGENTARGS`
    trap "kill $SSH_AGENT_PID" 0
fi

This will start an agent automatically for each new command prompt window that you open (which is suboptimal if you open multiple command prompts in one session, but at least it should work).

answered Nov 3, 2010 at 11:53

I faced the same problem for Linux, and here is what I did:

Basically, the command ssh-agent starts the agent, but it doesn’t really set the environment variables for it to run. It just outputs those variables to the shell.

You need to:

eval `ssh-agent`

and then do ssh-add. See Could not open a connection to your authentication agent.

Instead of using ssh-agent -s, I used eval `ssh-agent -s` to solve this issue.

Here is what I performed step by step (step 2 onwards on Git Bash):

1. Cleaned up my .ssh folder at C:user<username>.ssh
2. Generated a new SSH key:
   ssh-keygen -t rsa -b 4096 -C "xyz@abc.com"
3. Check if any process id(ssh agent) is already running.
   ps aux | grep ssh
4. (Optional) If found any in step 3, kill those
   kill <pids>
5. Started the SSH agent
   $ eval `ssh-agent -s`
6. Added SSH key generated in step 2 to the SSH agent
   ssh-add ~/.ssh/id_rsa

Try to do the following steps:

1. Open Git Bash and run: cd ~/.ssh

2. Try to run agent: eval $(ssh-agent)

3. Right now, you can run the following command: ssh-add -l

In Windows 10 I tried all answers listed here, but none of them seemed to work. In fact, they give a clue. To solve a problem, simply you need three commands. The idea of this problem is that ssh-add needs the SSH_AUTH_SOCK and SSH_AGENT_PID environment variables to be set with the current ssh-agent sock file path and pid number.

ssh-agent -s > temp.txt

This will save the output of ssh-agent in a file. The text file content will be something like this:

SSH_AUTH_SOCK=/tmp/ssh-kjmxRb2764/agent.2764; export SSH_AUTH_SOCK;
SSH_AGENT_PID=3044; export SSH_AGENT_PID;
echo Agent pid 3044;

Copy something like «/tmp/ssh-kjmxRb2764/agent.2764» from the text file and run the following command directly in the console:

set SSH_AUTH_SOCK=/tmp/ssh-kjmxRb2764/agent.2764

Copy something like «3044» from the text file and run the following command directly in the console:

set SSH_AGENT_PID=3044

Now when environment variables (SSH_AUTH_SOCK and SSH_AGENT_PID) are set for the current console session, run your ssh-add command and it will not fail again to connect to ssh agent.

One thing I came across was that eval did not work for me using Cygwin, what worked for me was ssh-agent ssh-add id_rsa.

After that I came across an issue that my private key was too open, the solution I managed to find for that (from here):

chgrp Users id_rsa

as well as

chmod 600 id_rsa

finally I was able to use:

ssh-agent ssh-add id_rsa

answered May 28, 2014 at 4:17

For Windows users, I found cmd eval `ssh-agent -s` didn’t work, but using Git Bash worked a treat:

eval `ssh-agent -s`; ssh-add KEY_LOCATION

And making sure the Windows service «OpenSSH Key Management» wasn’t disabled.

To amplify on n3o’s answer for Windows 7…

My problem was indeed that some required environment variables weren’t set, and n3o is correct that ssh-agent tells you how to set those environment variables, but doesn’t actually set them.

Since Windows doesn’t let you do «eval,» here’s what to do instead:

Redirect the output of ssh-agent to a batch file with

ssh-agent > temp.bat

Now use a text editor such as Notepad to edit temp.bat. For each of the first two lines:

• Insert the word «set» and a space at the beginning of the line.
• Delete the first semicolon and everything that follows.

Now delete the third line. Your temp.bat should look something like this:

set SSH_AUTH_SOCK=/tmp/ssh-EorQv10636/agent.10636
set SSH_AGENT_PID=8608

Run temp.bat. This will set the environment variables that are needed for ssh-add to work.

I just got this working. Open your ~/.ssh/config file.

Append the following-

Host github.com
 IdentityFile ~/.ssh/github_rsa

The page that gave me the hint Set up SSH for Git
said that the single space indentation is important… though I had a configuration in here from Heroku that did not have that space and works properly.

answered Feb 25, 2014 at 3:42

answered Nov 8, 2014 at 13:20

answered Jan 16, 2019 at 12:12

Let me offer another solution. If you have just installed Git 1.8.2.2 or thereabouts, and you want to enable SSH, follow the well-writen directions.

Everything through to Step 5.6 where you might encounter a slight snag. If an SSH agent is already be running you could get the following error message when you restart bash

Could not open a connection to your authentication agent

If you do, use the following command to see if more than one ssh-agent process is running

ps aux | grep ssh

If you see more than one ssh-agent service, you will need to kill all of these processes. Use the kill command as follows (the PID will be unique on your computer)

kill <PID>

Example:

kill 1074

After you have removed all of the ssh-agent processes, run the px aux | grep ssh command again to be sure they are gone, then restart Bash.

Voila, you should now get something like this:

Initializing new SSH agent...
succeeded
Enter passphrase for /c/Users/username/.ssh/id_rsa:

Now you can continue on Step 5.7 and beyond.

answered May 2, 2013 at 18:35

This will run the SSH agent and authenticate only the first time you need it, not every time you open your Bash terminal. It can be used for any program using SSH in general, including ssh itself and scp. Just add this to /etc/profile.d/ssh-helper.sh:

ssh-auth() {
    # Start the SSH agent only if not running
    [[ -z $(ps | grep ssh-agent) ]] && echo $(ssh-agent) > /tmp/ssh-agent-data.sh

    # Identify the running SSH agent
    [[ -z $SSH_AGENT_PID ]] && source /tmp/ssh-agent-data.sh > /dev/null

    # Authenticate (change key path or make a symlink if needed)
    [[ -z $(ssh-add -l | grep "/home/$(whoami)/.ssh/id_rsa") ]] && ssh-add
}

# You can repeat this for other commands using SSH
git() { ssh-auth; command git "$@"; }

Note: this is an answer to this question, which has been merged with this one.
That question was for Windows 7, meaning my answer was for Cygwin/MSYS/MSYS2. This one seems for some Unix, where I wouldn’t expect the SSH agent needing to be managed like this.

answered Oct 13, 2017 at 19:40

In Windows 10, using the Command Prompt terminal, the following works for me:

ssh-agent cmd 
ssh-add

You should then be asked for a passphrase after this:

Enter passphrase for /c/Users/username/.ssh/id_rsa:

answered Jan 25, 2021 at 13:00

Try the following:

ssh-agent sh -c 'ssh-add && git push heroku master'

answered Mar 26, 2015 at 21:13

Use parameter -A when you connect to server, example:

ssh -A root@myhost

from man page :

-A Enables forwarding of the authentication agent connection.  
   This can also be specified on a per-host basis in a configuration file.

   Agent forwarding should be enabled with caution.  Users with the ability to bypass file permissions on the remote host (for the agent's
   UNIX-domain socket) can access the local agent through the forwarded 
   connection.  An attacker cannot obtain key material from the agent,
   however they can perform operations on the keys that enable them to
   authenticate using the identities loaded into the agent.

I had this problem, when I started ssh-agent, when it was already running. It seems that the multiple instances conflict with each other.

To see if ssh-agent is already running, check the value of the SSH_AGENT_SOCK environment variable with:

echo $SSH_AGENT_SOCK

If it is set, then the agent is presumably running.

To check if you have more than one ssh-agent running, you can review:

ps -ef | grep ssh

Of course, then you should kill any additional instances that you created.

answered Jul 4, 2014 at 8:48

answered Jul 9, 2015 at 5:48

answered Nov 17, 2014 at 14:14

For Bash built into Windows 10, I added this to file .bash_profile:

if [ -z $SSH_AUTH_SOCK ]; then
    if [ -r ~/.ssh/env ]; then
            source ~/.ssh/env
            if [ `ps -p $SSH_AGENT_PID | wc -l` = 1 ]; then
                    rm ~/.ssh/env
                    unset SSH_AUTH_SOCK
            fi
    fi
fi

if [ -z $SSH_AUTH_SOCK ]; then
    ssh-agent -s | sed 's/^echo/#echo/'> ~/.ssh/env
    chmod 600 ~/.ssh/env
    source ~/.ssh/env > /dev/null 2>&1
fi

Using Git Bash on Windows 8.1 E, my resolution was as follows:

eval $(ssh-agent) > /dev/null
ssh-add ~/.ssh/id_rsa

answered Apr 19, 2014 at 10:18

This worked for me.

In the CMD window, type the following command:

cd path-to-Git/bin # (for example,cd C:Program FilesGitbin)
bash
exec ssh-agent bash
ssh-add path/to/.ssh/id_rsa

I use WSL with Ubuntu on my laptop to develop on Linux while I’m away from my desktop (with native Linux, where I don’t experience any problems like this). I have private git repo setup, and I use ssh to connect to it. I have ssh configured (in .ssh/config), and I have multiple keys for my VPS, GitHub, other VPS user account etc. so I use ssh-add on my desktop to manage them. But on my laptop, in WSL, when I try to connect to my VPS, ssh asks for the passphrase to the key. When I try to do ssh-add .ssh/mykey I get an error:

$ ssh-add .ssh/mykey
Could not open a connection to your authentication agent.

But ssh-agent is running:

$ ps -e | grep ssh
4455 ?        00:00:00 ssh-agent
5517 ?        00:00:00 sshd
6164 pts/0    00:00:00 ssh

I don’t see why is there a problem. If I kill currently running ssh-agent and launch it again (using eval $(ssh-agent -s)) it works fine.

asked Oct 2, 2018 at 7:08

Looks like you are starting ssh-agent but you are not setting up the variable pointing to it.

When you just run ssh-agent it will output something like:

SSH_AUTH_SOCK=/tmp/ssh-UfASAcTfsiJm/agent.77; export SSH_AUTH_SOCK;
SSH_AGENT_PID=78; export SSH_AGENT_PID;

Copy that as commands and paste to bash, or make your life simpler by just executing:

eval `ssh-agent`

After that variables will be set and ssh-add will know how to connect to ssh-agent.

answered Apr 1, 2019 at 19:22

The problem is that with WSL (as of 2019) you can start multiple shells from the Window subsystem, they are aware of each others but don’t inherit any variables. Therefore they don’t know that ssh-agent is already running.

I managed to get it working by adding this bit of code to my .bashrc:

source /tmp/ssh-agent >/dev/null 2>&1
ssh-add 2> /dev/null
if [ $? -ne 0 ]; then
  ssh-agent >/tmp/ssh-agent
  source /tmp/ssh-agent >/dev/null 2>&1
  ssh-add
fi

Maybe not the most eloquent code, but it solves the problem.

answered Aug 19, 2019 at 13:08