Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread John Clarke
On Tue, Jul 08, 2003 at 03:40:03PM +1000, Jamie Wilkinson wrote: Does anyone know of a way to have a single ssh-agent running on a machine per user, so that when they log in on the console, or via {k,g,x}dm, or ssh, only one ssh-agent is running? At boot time start one agent per user: su

Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread Andrew McNaughton
On Tue, 8 Jul 2003, Jamie Wilkinson wrote: Hey slugs, 2 parts to this: Does anyone know of a way to have a single ssh-agent running on a machine per user, so that when they log in on the console, or via {k,g,x}dm, or ssh, only one ssh-agent is running? if you run ssh-agent without giving

Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread Robert Collins
On Tue, 2003-07-08 at 15:40, Jamie Wilkinson wrote: Hey slugs, 2 parts to this: Does anyone know of a way to have a single ssh-agent running on a machine per user, so that when they log in on the console, or via {k,g,x}dm, or ssh, only one ssh-agent is running? You may like keychain.

Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread Jamie Wilkinson
This one time, at band camp, Andrew McNaughton wrote: That would be seriously insecure. How so? The key couldn't be used until the passphrase was entered. I want my passphrases to be asked for on demand. keeping the *already passphrased* keys in ssh-agent all the time is insecure. -- [EMAIL

Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread Jamie Wilkinson
This one time, at band camp, Robert Collins wrote: On Tue, 2003-07-08 at 15:40, Jamie Wilkinson wrote: Hey slugs, 2 parts to this: Does anyone know of a way to have a single ssh-agent running on a machine per user, so that when they log in on the console, or via {k,g,x}dm, or ssh, only

Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread Robert Collins
On Tue, 2003-07-08 at 16:53, Mikolaj Habryn wrote: On Tue, 2003-07-08 at 16:25, Robert Collins wrote: I suspect this is impossible. The key is not usable until it's decrypted by the passphrase. Until it's decrypted, it can't be used in handshaking: thus all keys need to be known before the

Re: [SLUG] ssh-agent passphrase-on-demand

2003-07-08 Thread Mikolaj Habryn
On Tue, 2003-07-08 at 16:25, Robert Collins wrote: I suspect this is impossible. The key is not usable until it's decrypted by the passphrase. Until it's decrypted, it can't be used in handshaking: thus all keys need to be known before the first ssh handshake of a given protocol. Technically

[SLUG] ssh-agent passphrase-on-demand

2003-07-07 Thread Jamie Wilkinson
Hey slugs, 2 parts to this: Does anyone know of a way to have a single ssh-agent running on a machine per user, so that when they log in on the console, or via {k,g,x}dm, or ssh, only one ssh-agent is running? Does anyone know how to have ssh keys loaded into ssh-agent without having ssh-add