Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-17 Thread Peter Kjellstrom
On Thursday 17 April 2008, Brian Mathis wrote: > On Tue, Apr 15, 2008 at 8:12 AM, Peter Kjellstrom <[EMAIL PROTECTED]> wrote: > > On Tuesday 15 April 2008, Clint Dilks wrote: > > > 1. Currently all of the key pairs we are using have empty passphrases > > > is it worth the effort of changing this

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-16 Thread Andreas Pedersen
On Tue, Apr 15, 2008 at 11:48 AM, Fajar Priyanto <[EMAIL PROTECTED]> wrote: > On Tuesday 15 April 2008 16:13:55 William L. Maltby wrote: > > How sensitive is the data and how critical are the functions that that > > could be disrupted? What is the scope of exposure to intrusion from > > outside

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-16 Thread Brian Mathis
On Wed, Apr 16, 2008 at 8:15 PM, Brian Mathis <[EMAIL PROTECTED]> wrote: > > On Tue, Apr 15, 2008 at 8:12 AM, Peter Kjellstrom <[EMAIL PROTECTED]> wrote: > > On Tuesday 15 April 2008, Clint Dilks wrote: > > > 1. Currently all of the key pairs we are using have empty passphrases is > > > it wor

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-16 Thread Brian Mathis
On Tue, Apr 15, 2008 at 8:12 AM, Peter Kjellstrom <[EMAIL PROTECTED]> wrote: > On Tuesday 15 April 2008, Clint Dilks wrote: > > 1. Currently all of the key pairs we are using have empty passphrases is > > it worth the effort of changing this and setting up ssh-agent compared > > to what you gain

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread Clint Dilks
Clint Dilks wrote: Hi People, The Linux Environment I am responsible for is using ssh key pairs to allow access to a number or accounts on a number Linux Servers. I currently have the opportunity to re-design some of this. So I would like to tap into peoples experiences to see what might be

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread Ingemar Nilsson
Fajar Priyanto wrote: On Tuesday 15 April 2008 16:13:55 William L. Maltby wrote: How sensitive is the data and how critical are the functions that that could be disrupted? What is the scope of exposure to intrusion from outside the organization (LAN, firewalls, in place, etc.). For example rsy

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread Peter Kjellstrom
On Tuesday 15 April 2008, Clint Dilks wrote: > 1. Currently all of the key pairs we are using have empty passphrases is > it worth the effort of changing this and setting up ssh-agent compared > to what you gain in security by doing this ? To get a clear idea of what keys with no passphrases are l

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread Peter Kjellstrom
On Tuesday 15 April 2008, Fajar Priyanto wrote: > On Tuesday 15 April 2008 16:13:55 William L. Maltby wrote: > > How sensitive is the data and how critical are the functions that that > > could be disrupted? What is the scope of exposure to intrusion from > > outside the organization (LAN, firewall

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread Fajar Priyanto
On Tuesday 15 April 2008 16:13:55 William L. Maltby wrote: > How sensitive is the data and how critical are the functions that that > could be disrupted? What is the scope of exposure to intrusion from > outside the organization (LAN, firewalls, in place, etc.). For example rsync functions. It won

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread William L. Maltby
On Tue, 2008-04-15 at 17:56 +1200, Clint Dilks wrote: > Hi People, > > The Linux Environment I am responsible for is using ssh key pairs to > allow access to a number or accounts on a number Linux Servers. I > currently have the opportunity to re-design some of this. So I would > like to tap

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-15 Thread Daniel de Kok
On Tue, Apr 15, 2008 at 7:56 AM, Clint Dilks <[EMAIL PROTECTED]> wrote: > 1. Currently all of the key pairs we are using have empty passphrases is it > worth the effort of changing this and setting up ssh-agent compared to what > you gain in security by doing this ? Sure. In the first case someon

Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-14 Thread Morten Nilsen
Clint Dilks wrote: 1. Currently all of the key pairs we are using have empty passphrases is it worth the effort of changing this and setting up ssh-agent compared to what you gain in security by doing this ? Certainly, adding passphrases nudges the security up a step, as otherwise a compromis

[CentOS] SSH Question relating to Public and Private Keys

2008-04-14 Thread Clint Dilks
Hi People, The Linux Environment I am responsible for is using ssh key pairs to allow access to a number or accounts on a number Linux Servers. I currently have the opportunity to re-design some of this. So I would like to tap into peoples experiences to see what might be some good changes