North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Remote Shell

  • From: Ingo Luetkebohle
  • Date: Tue Sep 29 10:54:53 1998 
On Tue, 29 Sep 1998, Adam D. McKenna wrote:
> This will work if you have no passphrase on your RSA key.  This is a *really*
> stupid thing to do, IMHO, especially to a root account, as anyone who manages
> to get access to your ~/.ssh/identity file will be able to log into any host
> that you have set this up on, without a password.  While it's a little more
> secure than .rhosts authentication, the absence of any kind of
> password/passphrase validation makes it (again IMHO) an undesirable option for
> the security conscious.

Well, you can use ssh-agent. Then its rsh equivalent and your identity is
still protected.
 
---Ingo Luetkebohle, CTO
dev/consulting Gesellschaft fuer Netzwerkentwicklung und -beratung mbH
url: http://www.devconsult.de/ - fon: 0521-1365800 - fax: 0521-1365803