Right now I have gnome-keyring-daemon set to start at login. If I run emacs -q and then open a file on a server using M-x find-file and then enter a file on a remote server such as /ssh:user@server:/home/user/.bashrc, then a GUI pops up and asks for my ssh private key password. I enter the correct password, and the file opens perfectly.
However, if the gnome-keyring-daemon password expires from the keyring, emacs still allows connection to the file without entering the password. For example, let's say I open a remote file, then kill the file with C-x k. Then I go to a terminal and type ssh-add -D. I can verify that this causes the keyring to forget the password by running ssh localhost (the GUI pops up and asks for the password.) But if I try and re-open the remote file in emacs using C-x C-f M-p RET, the file opens without requiring the password.
Running tramp-cleanup-all-connections fixes this issue i.e. the agent will correctly ask for a password if the key is not in the keyring. Setting tramp-persistency-file-name to nil does not seem to change the behavior.
What is an efficient way to fix this problem? Do I run tramp-cleanup-all-connections on some hook? Maybe on a timer? Does running this function have a negative impact on future tramp connections?
- emacs-version: GNU Emacs 24.3.1
- tramp-version: 2.2.6-24.3
- gnome-keyring-daemon --version: 3.2.2
EDIT
I'm now on a different computer with new versions of the relevant packages, but I still see the same behavior.
- emacs-version: GNU Emacs 24.4.2
- tramp-version: 2.2.9-24.4
- gnome-keyring-daemon --version: 3.10.1
I just ran the following steps:
- Open emacs with
emacs -Q - Eval
(require 'tramp)and(setq tramp-verbose 10) - Open file on remote server using
tramp; gnome-keyring-daemon GUI asked for SSH key password. - Killed the remote file using
C-x k - In a terminal I ran
ssh-add -Dand verified that the password is no longer cached. - Re-opened remote file using
C-x C-f M-p RET - Tramp opened file without asking for a password.
A copy of tramp's debug buffer is located at this pastebin.