Re: Going MAD trying to get scp working on Solaris8 - Horah - Its res olved - Or Is it....

From: Galen Johnson (gjohnson_at_trantor.org)
Date: 06/25/03

  • Next message: Darren Reed: "Securing ssh tunnels." 
    Date: Tue, 24 Jun 2003 22:00:45 -0400
To: "Wright, Gary" <Gary.Wright@uk.experian.com>

    Check out keychain by the gentoo developer...works extremely well.
    This article may be useful...

    http://www-106.ibm.com/developerworks/linux/library/l-keyc2/?open&l=252,t=grl,p=ossh2

    =G=

    Wright, Gary wrote:

    >MANY MANY MANY MANY THANKS to everyone for replying to my email, scp is now
    >working without entering a password or passphrase.
    >It works by entering NO passphrase when creating the key files (on both
    >servers) and by setting (PubkeyAuthentication yes) in sshd_config
    >As soon as these changes were made and the SSHD daemons were re-started, all
    >was fine :-)))
    >
    >My only remaining question is, isn't it VERY insecure to use NULL pass
    >phrases, all SSH documentation warns against using null pass phrases.
    >Is it not possible to copy file(s) via scp and using passphases ?
    >
    >Further investigation reveals that you can set a passphrase as recommended
    >and then use the eval 'ssh-agent' and ssh-add commands to add the
    >passphrase to the running agent. This looks great, BUT it appears that a
    >user has to enter the passphrase every time the agent is called.
    >I know I must be missing something as you must be able to add the
    >pass-phrase once only, and then be able to use scp whenever from
    >scripts/cronjobs etc.
    >
    >Can anyone please tell me how I now complete the final piece of the puzzle
    >and add the passphrase ONCE enabling a user to use scp whenever
    >(interactively,
    >scripts, cronjobs etc).
    >
    >Thanks Again for your all your help.
    >
    >Regards,
    >
    >Gary.
    >
    >
    >
    >
    >Gary Wright
    >Oracle Technical Team Leader
    >Host Strategy
    >Experian Ltd
    >
    >
    >
    >>* +44 (0)115 934 4672
    >>* +44 (0)7967 342 777
    >>* +44 (0)115 934 4680
    >>* Email: gary.wright@uk.experian.com
    >>
    >>
    >>
    >>
    >>
    >
    >
    >=======================================================================
    >Information in this email and any attachments are confidential, and may
    >not be copied or used by anyone other than the addressee, nor disclosed
    >to any third party without our permission. There is no intention to
    >create any legally binding contract or other commitment through the use
    >of this email.
    >Experian Limited (registration number 653331).
    >Registered office: Talbot House, Talbot Street, Nottingham NG1 5HF
    >
    >
    >

  • Next message: Darren Reed: "Securing ssh tunnels."

    Relevant Pages

    • Going MAD trying to get scp working on Solaris8 - Horah - Its res olved - Or Is it....
      ... MANY MANY MANY MANY THANKS to everyone for replying to my email, scp is now ... It works by entering NO passphrase when creating the key files (on both ... Talbot House, Talbot Street, Nottingham NG1 5HF ...
      (SSH)
    • Re: Encrypting private key with Windows
      ... >> What threats are you trying to guard against? ... > without entering passphrases all the time. ... > and removing the passphrase, ...
      (comp.security.ssh)
    • Re: cant open display : (on Linux rlogin to SGI)
      ... You can use SSH with public key authentication and without a passphrase. ... > secure shell without entering a password. ... There are a lot of ressource available on thet that subject, ...
      (comp.unix.questions)
    • Re: cant open display : (on Linux rlogin to SGI)
      ... You can use SSH with public key authentication and without a passphrase. ... > secure shell without entering a password. ... There are a lot of ressource available on thet that subject, ...
      (comp.sys.sgi.misc)
    • Re: scp and scripts?
      ... The following is basically what I want the script to do, ... >> but I heard scp will not work with authentication. ... > an SSH key of the appropriate type. ... > want a passphrase; press enter to use a blank passphrase. ...
      (Debian-User)