[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: shifting from pserver method to ext method

From: Mark D. Baushke
Subject: Re: shifting from pserver method to ext method
Date: Fri, 02 May 2003 19:13:29 -0700

Eric Siegerman <address@hidden> writes:

> On Fri, May 02, 2003 at 03:11:53PM -0400, Zieg, Mark wrote:
> > >       - It's probably worth spending the extra time to figure out
> > >   the ssh-agent stuff; otherwise, people will be doing a
> > >   *lot* of password-typing.
> > 
> > Or figure out ssh-keygen
> Woops, I didn't mention that part.  I guess I considered it an
> intrinsic part of "setting up SSH" :-)

SSH allows for multiple kinds of authentication methods including
password and ssh-keygen'd key.

> > (less typing still, and very nearly as secure).
> How do you figure?  Without ssh-agent, they'd still have to type
> their SSH pass phrase every time...

It is possible to create a key that does not need a passphrase using the
'-N ""' argument to ssh-keygen, but it is NOT a recommended method.

For example, many folks do not recognize the evils associated with NFS
mounting $HOME/.ssh across the network when a key without a passphrase
is used...

        -- Mark

reply via email to

[Prev in Thread] Current Thread [Next in Thread]