Re: shifting from pserver method to ext method

[Mark D. Baushke]

Eric Siegerman <address@hidden> writes:

> On Fri, May 02, 2003 at 03:11:53PM -0400, Zieg, Mark wrote:
> > >       - It's probably worth spending the extra time to figure out
> > >   the ssh-agent stuff; otherwise, people will be doing a
> > >   *lot* of password-typing.
> > 
> > Or figure out ssh-keygen
> 
> Woops, I didn't mention that part.  I guess I considered it an
> intrinsic part of "setting up SSH" :-)

SSH allows for multiple kinds of authentication methods including
password and ssh-keygen'd key.

> > (less typing still, and very nearly as secure).
> 
> How do you figure?  Without ssh-agent, they'd still have to type
> their SSH pass phrase every time...

It is possible to create a key that does not need a passphrase using the
'-N ""' argument to ssh-keygen, but it is NOT a recommended method.

For example, many folks do not recognize the evils associated with NFS
mounting $HOME/.ssh across the network when a key without a passphrase
is used...

        Enjoy!
        -- Mark