Re: HELP can't get host-based authentication to work!

From: Simon Tatham (anakin_at_pobox.com)
Date: 08/14/03

  • Next message: bob: "VNC Through WinSSHD" 
    Date: 14 Aug 2003 13:56:23 +0100 (BST)

    Gary Blydenburgh <gary@blydenburgh.com> wrote:
    > I guess it would make sense to tell you what I am trying to accomplish.
    > I have a script that is going to run every hour to pick up a file from a
    > server on an untrusted network. I want the script to run under a certain
    > userid and not have to worry about inputting a password, a secure RSH. The
    > instructions are calling this host-base authentication.

    I'd recommend using public-key authentication, and setting up a
    specific public key which is restricted on the server side, so that
    a user authenticating with that public key is only allowed to run
    the single command which prints out the contents of this file.

    That way, you can store that public key on disk without a
    passphrase, and even if someone manages to steal it they haven't
    gained full access to the server account - _all_ they've acquired is
    the ability to read the contents of this file. 

    -- 
Simon Tatham         "I'm cross. I'm going to have a tantrum.
<anakin@pobox.com>    <pause> How do I start?"            - my uncle
  • Next message: bob: "VNC Through WinSSHD"

    Relevant Pages

    • Re: Mail::SendEasy defaulting to localhost?
      ... Trying to put together a simple script that sends out email via my SMTP ... You do have a SMTP server running locally by default. ... which logs into your ISP's Mailserver with authentication. ...
      (comp.lang.perl.misc)
    • Re: How to access Windows IIS User Info with Perl
      ... With the use of an .htaccess file, only users that login ... > with basic authentication are able to run the script. ... > 2003 server running IIS. ...
      (comp.lang.perl.misc)
    • Re: Session_start generates Ilegal Instruction under php 4.3.11 Help?
      ... >> I set up a server on an AMD 650 machine running gentoo linux. ... "PHP and MySQL For Dynamic Web Sites." ... I used Script 7.7 and replaced all the constants with my own ... >> # This page both prompts for authentication via a form and also ...
      (comp.lang.php)
    • Re: security of SSH1 and SSH2 protocols
      ... the signature of the message such that the cached public key could ...  if you use public key authentication, however, presumably, ... only the server you're talking to will have your private key. ...
      (comp.security.ssh)
    • EMail script fails from Server 2008 only
      ... Basically I have a script that sends emails after backup jobs complete. ... If I run it from a server 2008 machine I get a logon box which comes from ... then the email works so it obviously picks up the authentication ... 'Name or IP of Remote SMTP Server ...
      (microsoft.public.scripting.vbscript)
    • Quantcast