Re: ssh

On 2/28/07, Roberto C. Sanchez <roberto@xxxxxxxxxxxx> wrote:
On Wed, Feb 28, 2007 at 03:42:48PM +0100, Giacomo Montagner wrote:
>
>
> Hi!
> Usually I do not change anything in ssh configuration. All I do is this:
>
> On source machine:
>
> user1@host1:~$ ssh-keygen -t dsa
> <use empty passphrase>
>
> user1@host1:~$ cat ~/.ssh/id_dsa.pub
>
> On destination machine:
> user2@host2:~$ vi ~/.ssh/authorized_keys
> <paste the content of user1@host1's id_dsa.pub and save the file>
>
> Now you should be able to do:
> user1@host1:~$ ssh user2@host2
>
> without needing to type any password.
>
> Hope this helps.
>
Ahh. That's what I was afraid of. Having ssh keys without a passphrase
is convenient, but very insecure. You are better off without the keys.
For the longest time I did not understand that, then some kind soul on
this list pointed to ssh-agent and keychain. Very minor inconvenience
(enter the passphrase once when you login), and *much* more secure.

I use this method, (without passphrase) to be able to run script (with
cronjob) from one machine into other, if I put a passphrase that is
not going to work, am I right?

Anyway to get my key, a "hacker" will need access to my PC right? if
both PCs are secured there should be no chance to get my keys stolen.
--
Guillermo Garron
"Linux IS user friendly... It's just selective about who its friends are."
(Using FC6, CentOS4.4 and Ubuntu 6.06)
http://feeds.feedburner.com/go2linux
http://www.go2linux.org


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Relevant Pages

  • Re: Passwordless ssh, "once and for all"...
    ... ssh in "ssh machine1@123.123.123.123" ... When creating keys for passwordless access, create keys with no passphrase ... Passwordless ssh, "once and for all"... ...
    (SSH)
  • Re: cant open display : (on Linux rlogin to SGI)
    ... You only need to create one pair of keys, if you just want to connect ... Is that your login or your SSH passphrase? ... > there is no known_hosts file any where on the Linux computer. ...
    (comp.sys.sgi.misc)
  • Re: cant open display : (on Linux rlogin to SGI)
    ... You only need to create one pair of keys, if you just want to connect ... Is that your login or your SSH passphrase? ... > there is no known_hosts file any where on the Linux computer. ...
    (comp.unix.questions)
  • Re: SSH password as a command-line parameter?
    ... This would work except that I still need to type the ssh password. ... During ssh-keygen, you'll be asked for a passphrase, though. ... unlock the keys with their passphhhrases for the current session. ...
    (Ubuntu)
  • Re: ssh
    ... keys in memory after you log out until the next time you log in. ... again and so you will need to enter your passphrase each time you log ... for the first time after the first login), until I quit all my shell ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)