Re: How to pass in a password to the ssh command line client?

2002-12-26 Thread Fraser Campbell
On December 26, 2002 08:27 am, the fabulous hugh at atosc dot org wrote:

> Using a ssh key without a passphrase seems to be be a bad idea.
> You need to look on keychain.

Depends on what you are doing but keychain definitely looks interesting 
(haven't given it a try yet).

Looking at the description of keychain I'd still go with a passphraseless key 
though.  I don't want automated scripts failing because a server has rebooted 
and I forgot to run keychain.

The passphraseless key would be severely restricted:

- login only allowed from known host
- key only used in purpose specific case (not for general login)
- key restricted in port forwards allowed
- possibly forcibly running a command on login, allow nothing else

I'm not sure how keychain reduces the risks.  A passphraseless key is mode 
400, root or user-level compromise is required for it to be used in an 
attack.  The same level of compromise would make your keychain setup just as 
vulnerable, right?

Fraser


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: How to pass in a password to the ssh command line client?

2002-12-26 Thread hugh at atosc dot org
Using a ssh key without a passphrase seems to be be a bad idea.
You need to look on keychain.

Fraser Campbell wrote:

On December 25, 2002 12:38 pm, the fabulous Mariano Kamp wrote:



 I am using eclipse (http://eclipse.org) to access a cvs repository by
using ext:. The problem is that it asks for the ssh password on the
command line. Anything I can do to pass it in automatically?



Can you not use an ssh key without a passphrase?

Fraser







--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: How to pass in a password to the ssh command line client?

2002-12-25 Thread Mark Janssen
On Wed, 2002-12-25 at 19:37, Fraser Campbell wrote:
> On December 25, 2002 12:38 pm, the fabulous Mariano Kamp wrote:
> 
> >   I am using eclipse (http://eclipse.org) to access a cvs repository by
> > using ext:. The problem is that it asks for the ssh password on the
> > command line. Anything I can do to pass it in automatically?
> 
> Can you not use an ssh key without a passphrase?

Even better, use a key with a passphrase, but run the ssh-agent

-- 
Mark Janssen <[EMAIL PROTECTED]>
Saiko Internet Technologies


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: How to pass in a password to the ssh command line client?

2002-12-25 Thread Fraser Campbell
On December 25, 2002 12:38 pm, the fabulous Mariano Kamp wrote:

>   I am using eclipse (http://eclipse.org) to access a cvs repository by
> using ext:. The problem is that it asks for the ssh password on the
> command line. Anything I can do to pass it in automatically?

Can you not use an ssh key without a passphrase?

Fraser


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]