Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Jan 2003 16:06:30 -0800
From:      "Michael K. Smith" <mksmith@noanet.net>
To:        Bob Willcox <bob@immure.com>
Cc:        questions list <freebsd-questions@freebsd.org>
Subject:   Re: ssh with public keys and no prompts...I can't get it to work!
Message-ID:  <5C19659C-2D9D-11D7-8983-003065CA9420@noanet.net>
In-Reply-To: <20030121230003.GD91874@luke.immure.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tuesday, January 21, 2003, at 03:00 PM, Bob Willcox wrote:

> On Tue, Jan 21, 2003 at 02:38:33PM -0800, Michael K. Smith wrote:
>>
>> Hello:
>>
>> Did you create your keys with no passwords, as in "ssh-keygen -t dsa"
>> then just hit return a couple of times instead of giving a password?
>
> No, I didn't try that yet...just did now and it works! Great! :-) What
> is the downside (if any) to not specifying a passphrase?

Well, if someone got your private keys without a password, they could  
use them to log in all over your network using just the scenario you  
are using now.  That's one reason to have rwx for the user only on the  
.ssh directory.  But, I think the likelihood of this is fairly small  
(famous last words, I know).

Mike

------------------------------------------------------------------------ 
--
Michael	K.	Smith		NoaNet
206.219.7116 (work)		206.579.8360 (cell)
mksmith@noanet.net		http://www.noanet.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5C19659C-2D9D-11D7-8983-003065CA9420>