[pkg-gnupg-maint] Bug#919856: Bug#919856: gpg-agent: agent refuses operation again

[Norbert Preining]

Hi Yutaka,

thanks for your email.

On Wed, 23 Jan 2019, NIIBE Yutaka wrote:
> Manual workaround to set environment variables is:
> 
> 	$ gpg-connect-agent updatestartuptty /bye

This didn't work :-(

After reboot and login:

$ ls -l /etc/alternatives/pinentry
lrwxrwxrwx 1 root root 24 Jan 23 12:11 /etc/alternatives/pinentry -> /usr/bin/pinentry-gnome3*
$ set | grep DBUS
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus
$ ssh <some-host>
sign_and_send_pubkey: signing failed: agent refused operation
sign_and_send_pubkey: signing failed: agent refused operation
norbert@<some host>'s password:

$ gpg-connect-agent updatestartuptty /bye
OK
$ ssh <some-host>
sign_and_send_pubkey: signing failed: agent refused operation
sign_and_send_pubkey: signing failed: agent refused operation
norbert@<some host>'s password:

$


> It may happen when gpg-agent doesn't know DBUS_SESSION_BUSS_ADDRESS.

See above, at least in my shell it is set.

> > 	then I switched to pinentry-gtk-2, same

confirmed again.

> It may happen when gpg-agent doesn't know DISPLAY or XAUTHORITY.

both are set in my env.

> > After switching to pinentry-qt it started to work ...

Confirmed after updating sid, rebooting.

This is cinnamon (version4)
login manager: lightdm

gpg-agent not started via Cinnamon's "Startup Applications" but
seems to be launched via systemd:

$ systemctl --user | grep gpg
gpg-agent.service                                                                        loaded active running   GnuPG cryptographic agent and passphrase cache                          
gpg-agent-browser.socket                                                                 loaded active running   GnuPG cryptographic agent and passphrase cache (access for web browsers)
gpg-agent-extra.socket                                                                   loaded active running   GnuPG cryptographic agent and passphrase cache (restricted)             
gpg-agent-ssh.socket                                                                     loaded active running   GnuPG cryptographic agent (ssh-agent emulation)                         
gpg-agent.socket                                                                         loaded active running   GnuPG cryptographic agent and passphrase cache                          
$

All the best

Norbert

--
PREINING Norbert                               http://www.preining.info
Accelia Inc.     +    JAIST     +    TeX Live     +    Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13