Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-14 Thread Daniel Jacobowitz
On Thu, Sep 13, 2001 at 01:00:11PM -0400, Brian Sniffen wrote: These are not equivalent situations. If the machine is turned off, keychain's keys are removed from memory. The passphraseless key is still on disk. It's also significantly harder to get the key out of ssh-agent's memory than

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Steve Greenland
On 12-Sep-01, 19:08 (CDT), Cesar Mendoza [EMAIL PROTECTED] wrote: I find the package useful and I'm also aware of the shortcomings of ssh-agent, but was your solution to cron job's that do rsync over ssh? and I don't think that pass phrase less keys is an option. Why not? Create a

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Richard Atterer
On Wed, Sep 12, 2001 at 11:06:30PM -0400, Daniel Jacobowitz wrote: Keychain is functionaly equivalent to a passphraseless key, though. Exactly my point! The only additional thing you get with keychain is a false sense of security. On Wed, Sep 12, 2001 at 07:08:32PM -0500, Cesar Mendoza wrote:

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Daniel Jacobowitz
On Thu, Sep 13, 2001 at 01:27:05PM +0200, Richard Atterer wrote: Indeed. You might want to experiment with the following: Create a dedicated user on the machine that you log into, whose default shell is not /bin/sh, but a script of yours which executes rsync with the right options, no

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Cesar Mendoza
On Thu, Sep 13, 2001 at 06:46:57AM -0500, Steve Greenland wrote: On 12-Sep-01, 19:08 (CDT), Cesar Mendoza [EMAIL PROTECTED] wrote: I find the package useful and I'm also aware of the shortcomings of ssh-agent, but was your solution to cron job's that do rsync over ssh? and I don't think

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Martijn van Oosterhout
On Thu, Sep 13, 2001 at 09:44:06AM -0500, Cesar Mendoza wrote: That is the setup I have (a especial key just for the cronjob, but since it is runing under my user name, I like to use ssh-agent to add my other keys, then delete them when the session is over), but I want the key to have

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Brian Sniffen
These are not equivalent situations. If the machine is turned off, keychain's keys are removed from memory. The passphraseless key is still on disk. It's also significantly harder to get the key out of ssh-agent's memory than it is to read it off of disk. Keychain is inappropriate for many

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Richard Atterer
On Tue, Sep 11, 2001 at 03:00:44PM -0500, Cesar Mendoza wrote: Package: wnpp Severity: whishlist ^ typo From the keychain help: Keychain is an OpenSSH key manager, typically run from ~/.bash_profile. When run, it will make sure ssh-agent is running; if not, it will start

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Cesar Mendoza
On Wed, Sep 12, 2001 at 01:05:12PM +0200, Richard Atterer wrote: On Tue, Sep 11, 2001 at 03:00:44PM -0500, Cesar Mendoza wrote: Package: wnpp Severity: whishlist ^ typo I know and the ITP was reassigned to wishlist. From the keychain help: Keychain is an OpenSSH key

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Jacob Kuntz
On Wed, Sep 12, 2001 at 07:08:32PM -0500, Cesar Mendoza wrote: On Wed, Sep 12, 2001 at 01:05:12PM +0200, Richard Atterer wrote: On Tue, Sep 11, 2001 at 03:00:44PM -0500, Cesar Mendoza wrote: What's really needed is a little work on ssh-agent so that - when ssh asks for a DSA passphrase, it

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Daniel Jacobowitz
On Wed, Sep 12, 2001 at 07:08:32PM -0500, Cesar Mendoza wrote: I find the package useful and I'm also aware of the shortcomings of ssh-agent, but was your solution to cron job's that do rsync over ssh? and I don't think that pass phrase less keys is an option. What you are doing is building a

Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-11 Thread Cesar Mendoza
Package: wnpp Severity: whishlist From the keychain help: Keychain is an OpenSSH key manager, typically run from ~/.bash_profile. When run, it will make sure ssh-agent is running; if not, it will start ssh-agent. It will redirect ssh-agent's output to ~/.ssh-agent, so that cron jobs that