Re: Can't login without password

From: HarryS (sutton@attbi.com)
Date: 01/05/03 

From: "HarryS" <sutton@attbi.com>
Date: Sun, 05 Jan 2003 11:16:45 GMT

This creates a key with no passphrase; that's generally considered a
security risk (sort of like having a login account with no password.)

A better alternative would be to create a keypair as described below, but
don't just hit Return when it asks you to enter a passphrase. Then use
ssh-agent (or Gentoo's Keychain
http://www.gentoo.org/proj/en/keychain.xml) to set up connections.
Granted, you'll have to enter your passphrase at least once, but it's a
lot better than leaving the door open....

        /Harry

On Sun, 05 Jan 2003 00:35:23 +0000, Cylurian wrote:

> "Charles Howse" <chowse@charter.net> wrote in message
> news:<v1erbj7v7rorf7@corp.supernews.com>...
>> [quoted text muted]
>
> I assume that you are using Openssh. If so, this is what I did.
>
> First on the client machine go to the ~/.ssh folder. If there is no
> ~/.ssh folder don't worry just go to your home directory. Then type the
> command:
>
> ssh-keygen -t dsa
>
> Hit return everytime without putting anything. Two file will be
> created, id_dsa and id_dsa.pub. The id_dsa.pub is the key that the
> server needs. id_dsa.pub is the file you send to the server. Leave the
> id_dsa file alone.
>

Relevant Pages

  • Re: [SLE] ssh agent in 9.3
    ... <SNIP> ... I hit enter for the passphrase when I make the key. ... box you ssh from, I dont believe I do, so I set passphrases on my keys. ...
    (SuSE)
  • Re: creating ssh key with no passphrase
    ... Ron Eggler wrote: ... passphrase too short: ... Or is my keygen command "corrupt"? ... you hit enter for a blank password. ...
    (comp.os.linux.networking)