Re: wrapper script to use cvs/scp through a ssh gateway

From: Darren Tucker (dtucker_at_gate.dodgy.net.au)
Date: 09/30/05 

Date: 30 Sep 2005 00:41:58 GMT

On 2005-09-29, bearclaw <bearclaw@free.fr> wrote:
> Darren Tucker wrote:
>> Well, that depends on how you do it. The technique I was referring to[1]
>> doesn't have any issues with allocation of ephemeral ports and would not
>> require any more password prompts than your existing solution.
>>
>> [1] http://groups.google.com/group/comp.security.ssh/msg/b85389215d06f766
>> http://groups.google.com/group/comp.security.ssh/msg/681932d1f3e6828d
>>
>
> It will not work in my case, as without a term I can't type the second
> password (just checked).

If you're doing it as it suggests then all authentications are local and
you don't need a remote pty.

For example, if I force password authentication in ~/.ssh/config, this still
works:

$ ssh -o "proxycommand ssh localhost connect %h %p" localhost
dtucker@localhost's password:
dtucker@localhost's password:
Last login: Fri Sep 30 10:32:44 2005 from localhost
[...]

> I should realy convince those admins about that
> ssh key thing :)

Yes, that will certainly make things easier :-) 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages