I have been using the setting:
[credentials]
force-ask = true
in <DATASET_NAME>/.datalad/config to require users to re-enter credentials, as a work around for the issue documented in Issue exiting Loris credentials prompt in Datalad after failed login. However I am finding that, while this solution works as expected when the user downloads the dataset to a machine that they have connected to using ssh -X, credentials are not requested again if the user connects to their target machine using ssh without any flags. This behaviour seems peculiar to me, as it is happening in contexts where all activity is carried out on the command line and I would not have expected XWindows forwarding to have an impact. Can anyone advise?
thank you
Emmet
–
Emmet A. O’Brien
Data Specialist, Canadian Open Neuroscience Platform
Is it consistent across multiple users? (Wondering if it is user configs specific somehow)
I’ve had several such difficulties using CLI SSH from macOS Sequoia. Some months ago, I was not being prompted for credentials when using the “-Y” switch with SSH, but here is the result of my most recent tests (2025-08-14):
- Remote system running DataLad: Linux Mint 22.1
- git-annex version: 10.20250520
- datalad version: 1.2.0
- Client system: macOS Sequoia 15.6
- SSH version: OpenSSH_9.9p2, LibreSSL 3.3.6
- Behaviour:
- When attempting a
datalad get *, I am not prompted for credentials when connecting to the remote Linux system from macOS with either ssh user@remote or ssh -X user@remote or ssh -Y user@remote
- In contrast,
datalad get * works as expected (prompting for credentials) when using the same Linux Mint 22.1 system locally or via remote desktop, i.e., seemingly when there is a graphical environment running within which a console is used to run DataLad.
I can confirm that ssh -Y, like ssh -X, does correctly ask for credentials for me. Versions used are datalad 1.1.5, git annex version 10.20250102 on Ubuntu 22.04.