Multi-hop access keeps asking for password on second machine

Multi-hop access keeps asking for password on second machine

[Luiz Romário Santana Rios]

(Please cc me when replying as I'm not subscribed to the list)

I use Tramp to access my remote work machine from home. Our machines are
only accessible through the comapny's internal network, so we either have
to use a VPN or double-hop to be able to access them. Both methods work
fine, but double-hopping doesn't seem to remember the password of the
second machine and Emacs keeps asking me for it multiple times per session
(every time I compile, every time eglot runs, etc). It seems
~/.authinfo.gpg only applies to the first hop not to any subsequent hops.

Can I solve this or is this a known limitation?

Re: Multi-hop access keeps asking for password on second machine

[Michael Albinus]

Luiz Romário Santana Rios <luizromario@tecgraf.puc-rio.br> writes:

Hi Luiz,

> I use Tramp to access my remote work machine from home. Our machines are
> only accessible through the comapny's internal network, so we either have
> to use a VPN or double-hop to be able to access them. Both methods work
> fine, but double-hopping doesn't seem to remember the password of the
> second machine and Emacs keeps asking me for it multiple times per session
> (every time I compile, every time eglot runs, etc). It seems
> ~/.authinfo.gpg only applies to the first hop not to any subsequent hops.
>
> Can I solve this or is this a known limitation?

Which Tramp version do you use?

~/.authinfo.gpg should handle multi-hops, but I'd like to know how it
looks like. Is a sudo hop part of it?

Anyway, a few days ago I rewrote Tramp password handling (due to a bug
found in context of bug#74105). It is also related to the multi-hop
scenario. So it might be worth to check this new version.

Do you have a chance to test a recent checkout of Emacs (aka 31.0.50) or
Tramp (aka 2.8.0-pre)? If not, you could wait some few days until the
end of this month. Tramp 2.7.1.5, containing this fix, will appear on
GNU ELPA then.

If you run already the current Tramp version, 2.7.1.4, from GNU ELPA, I
could send you the respective patch for test.

Best regards, Michael.

Re: Multi-hop access keeps asking for password on second machine

[Luiz Romário Santana Rios]

Em 19/11/2024 05:48, Michael Albinus escreveu:
> Which Tramp version do you use?

This has always happened to me regardless of version, but last time I've 
seen this behavior, I was on version 29. I do have a build of the master 
branch in my work PC, so I'll update Emacs to the latest commit and try 
it out again.

I'll be back soon to report results. Thanks for the help.

> ~/.authinfo.gpg should handle multi-hops, but I'd like to know how it
> looks like. Is a sudo hop part of it?

No. This is what I'm trying to do:

/ssh:luizromario@ssh-server.br|ssh:my-machine:~/

The password to ssh-server.br is asked once; the password to my-machine 
is asked multiple times.

Re: Multi-hop access keeps asking for password on second machine

[Luiz Romário Santana Rios]

Em 19/11/2024 10:59, Luiz Romário Santana Rios escreveu:
>
> I'll be back soon to report results. Thanks for the help.
>
It looks like your refactoring really did fix my bug. I've been running 
Emacs for a couple of hours now and Tramp still hasn't asked my password 
unnecessarily. Thanks!

When will this correction hit stable Emacs?

Re: Multi-hop access keeps asking for password on second machine

[Michael Albinus]

Luiz Romário Santana Rios <luizromario@tecgraf.puc-rio.br> writes:

Hi Luiz,

> It looks like your refactoring really did fix my bug. I've been
> running Emacs for a couple of hours now and Tramp still hasn't asked
> my password unnecessarily. Thanks!

Thanks for the feedback.

> When will this correction hit stable Emacs?

Emacs 30.1 is in pretest, so it will be Emacs 30.2.

As said in the other message, you can install Tramp 2.7.1.5 from GNU
ELPA with your Emacs 29. It will be available end of this month, and it
contains the patch.

Best regards, Michael.