Re: recursive ssh invocation

From: Nico Kadel-Garcia (nkadel_at_comcast.net)
Date: 05/29/05 

Date: Sun, 29 May 2005 00:05:43 -0400

"Andrei Alexandrescu (See Website for Email)"
<seewebsiteforemail@moderncppdesign.com> wrote in message
news:42992B7B.2050604@moderncppdesign.com...
>> But that looks like he does NOT have publickey set up to be used between
>> the computers. This makes it unlikely that this recursive procedure will
>> work. (in fact it does not if there is no publickey valid method between
>> machine1
>> and machine2) It cannot ask for a password.
>
> Thanks to all who've answered. Indeed, my net uses Kerberos with OpenSSH
> on Linux. Public key authentication is not allowed (they say "for security
> reasons"; the scenario they mention is that you start a
> session, leave your computer, and someone comes and scp's your public
> key to some other place thus gaining forever access to the net on your
> behalf). However, with Kerberos you can ssh from one machine to the next
> without having to type your password.

The bigger problem I've seen there is that people *insist* on leaving their
private keys without passphrases. I've seen peoplw who know much, much
better do this, because there is no general use yet of "keychain" tools or
good management of them.

> For reasons I don't get, however, the procedure fails on recursive
> invocations.

I suspect you need to learn to use quotes and backquoted quotes to
accomplish the right thing.