[Q&A] ssh parameter

[Megachip]

Documentation & bug reporting acknowledgment

Yes, I read it

Describe your problem

How to pass additional ssh parameters to glpi-remote like:
-oKexAlgorithms=+diffie-hellman-group14-sha1 -oHostKeyAlgorithms=+ssh-rsa -oMACs=+hmac-sha

[g-bougard]

Hi @Megachip

this is not possible in glpi-agent, but you can use ssh_config to tune ssh connections. Check man ssh_config ;-)

[Megachip]

Portable Windows Agent ignores var\.ssh\config ... should I create an Issue for that?

[g-bougard]

On Windows, we provides libssh2. If you want to use ssh, you'll have to setup your ssh client in the system path, then you have to setup the ssh config used by your ssh client.

My advise is to use ssh remote inventory on a linux server where it is easier to setup ssh config.

[Megachip]

Ubuntu 24.04 ignores ~/.ssh/config by default. So maybe, at least for the portable part, these options should be gone somewhere within the agent?

[g-bougard]

If you expect ssh options being used by glpi-agent service run as root, options should be defined in /root/.ssh/config. You can also define them in /etc/ssh/ssh_config as last choice.
One important point, if you create /root/.ssh folder manually, the folder must have specific rights on it. You can always test you ssh configuration by running a simple command like ssh remote-server id.