Re: ssh keys from two behind-the-firewall boxes?

2003-02-01 Thread Bill Moseley
On 1 Feb 2003, Jean-Marc V. Liotier wrote: # On the local host : ssh-keygen -t dsa -f id_dsa # When prompted for a password, just press 'enter'. scp id_dsa.pub [EMAIL PROTECTED]:~/ I would strongly recommend using a good pass phrase and ssh-agent. If someone gets your password less private

Re: ssh keys from two behind-the-firewall boxes?

2003-02-01 Thread nate
will trillich said: at what point are the passphrases required? if passwordless login/scp is the objective, where are the passphrases used? ssh-agent is designed to prompt you for your passphrase, then it stores it in memory, and automatically 'inputs' it when you connect. That is until you

Re: ssh keys from two behind-the-firewall boxes?

2003-02-01 Thread sean finney
On Sat, Feb 01, 2003 at 12:57:08PM -0800, nate wrote: will trillich said: at what point are the passphrases required? if passwordless login/scp is the objective, where are the passphrases used? ssh-agent is designed to prompt you for your passphrase, then it stores it in memory, and

Re: ssh keys from two behind-the-firewall boxes?

2003-02-01 Thread nate
sean finney said: right, but if they're storing a passphraseless key on another machine to which someone else has root, that someone else now has access to your machine too. if that's your root key... yes thats a good point, forgot about that. I can't remember the last time I had access to

ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread will trillich
this is probably item #2 of the really-obvious-faq that i'm not yet aware of, so i'll go ahead and ask because i haven't taken the opportunity to look like a goober in, oh, about half a day, now... doing the ssh-keygen thing works like a charm; you copy your private keys to the remote box and

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread nate
will trillich said: it's ip-based, isn't it? in my experience it is key based. though I think with ssh2 you have a more extensive set of options available to you to restrict access further, perhaps to the IP level. but if you just have the keys themselves in ~/.ssh/authorized_keys it should be

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread Osamu Aoki
Hi, On Fri, Jan 31, 2003 at 06:08:31PM -0600, will trillich wrote: this is probably item #2 of the really-obvious-faq that i'm not yet aware of, so i'll go ahead and ask because i haven't taken the opportunity to look like a goober in, oh, about half a day, now... doing the ssh-keygen

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread Matthew Daubenspeck
On Fri, Jan 31, 2003 at 06:08:31PM -0600, will trillich wrote: this is probably item #2 of the really-obvious-faq that i'm not yet aware of, so i'll go ahead and ask because i haven't taken the opportunity to look like a goober in, oh, about half a day, now... doing the ssh-keygen thing

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread nate
Matthew Daubenspeck said: Does anyone have a FAQ on how to set this all up? i have a real quick basic thing with SSH v1 on my mrtg page: http://howto.aphroland.de/HOWTO/MRTG/IPFWCountersWithMRTG SSH v2 is not *too* much different. though it's been a while since I tried it with DSA

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread Jean-Marc V. Liotier
On Sat, 2003-02-01 at 01:55, Matthew Daubenspeck wrote: On Fri, Jan 31, 2003 at 06:08:31PM -0600, will trillich wrote: doing the ssh-keygen thing works like a charm; you copy your private keys to the remote box and then just slap it into your ~/.ssh/authorized_keys file and poof, no more

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread sean finney
On Fri, Jan 31, 2003 at 05:39:22PM -0800, nate wrote: SSH v2 is not *too* much different. though it's been a while since I tried it with DSA authentication, last time I tried it, it was a real bitch to get working(this was about a year ago) erm, iirc it's the same thing, only if you're using

Re: ssh keys from two behind-the-firewall boxes?

2003-01-31 Thread Colin Watson
On Sat, Feb 01, 2003 at 02:57:01AM +0100, Jean-Marc V. Liotier wrote: On Sat, 2003-02-01 at 01:55, Matthew Daubenspeck wrote: Does anyone have a FAQ on how to set this all up? Below is what worked for me. I think that it may vary according to the version of the SSH protocol that you want to