Re: rsync won't stop password prompt

From: Ken Irving (fnkci_at_uaf.edu)
Date: 08/31/05

  • Next message: Cedric BRINER: "Re: mptscsih" 
    Date: Wed, 31 Aug 2005 07:58:25 -0800
To: debian-user@lists.debian.org

    On Fri, Aug 19, 2005 at 12:03:29AM -0600, Bob Proulx wrote:
    > Rob Brenart wrote:
    > > I'm trying to script an rsync process and I keep getting the password
    > > prompt... here's my "script"
    > >
    > > ...
    > ...
    >
    > If you want automated batch mode use of ssh you will need to use ssh
    > keys without a passphrase. Because the files are not encrypted and do
    > not have a passprase they must be protected with filesystem level
    > protection. Any user that can read those files can use it to access
    > the remote system.

    There is a safer way to accomplish this sort of thing, using ssh-agent.
    You set up ssh with a passphrase, then arrange ssh-agent to run on the
    backup machine. You'll need to logon *once* to that host and run ssh-add to
    provide ssh-agent the means to know the key values, which are stored in
    memory (in a named pipe) rather than on disk.

    Package keychain automates/simplifies much of this.

    Ken 

    -- 
Ken Irving, fnkci@uaf.edu
University of Alaska, Fairbanks
-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Cedric BRINER: "Re: mptscsih"

    Relevant Pages

    • Re: what is ssh-sgent?
      ... As I said ssh-agent gets installed when you install ssh. ... What I was saying is that this doesn't add any security for me as my sessions are left on all day so once I had started up and entered my ssh key for the session it's adding no security at all, anyone with access to my machine could use my ssh connections. ... If someone has physical access to my machine then they can see my keys but if they have physical access to my machine and I'm running ssh-agent although they don't get access to my keys they can use the ssh connections anyway so it makes no significant difference. ...
      (Ubuntu)
    • ssh-agent and dtlogin/gdm
      ... to make publickey authentication with SSH easier ... Sun integrates ssh-agent startup into dtlogin and/or gdm. ... As of now, even with x11-ssh-askpass integration into .dtprofile, ...
      (comp.unix.solaris)
    • Need help with SSH set-up
      ... I'm setting up SSH to replace telnet for use on my LAN. ... basic functionality working but I'm struggling with ssh-agent and ... ssh-add, but I can't figure out how. ...
      (Debian-User)
    • Re: what is ssh-sgent?
      ... Could someone tell me what ssh-agent is? ... If you have not explicitly installed ssh on your machine (IIRC it is not ... I sometimes ssh to a local machine on my network (a small web server), ... It allows me to disable password access to, hopefully, ...
      (Ubuntu)
    • Re: what is ssh-sgent?
      ... ssh-agent is part of the ssh suite of programs. ... to have a secure connection to another machine using public/private ... If you have not explicitly installed ssh on your machine (IIRC it is not ... However, depending on what applications ...
      (Ubuntu)