Subject: Re: ssh passphrase question.
To: Todd Whitesel <toddpw@best.com>
From: Todd Vierling <tv@pobox.com>
List: netbsd-help
Date: 12/27/1998 09:33:00
On Sun, 27 Dec 1998, Todd Whitesel wrote:
: Tonight I used ssh-keygen to make a key pair, and put the public key in my
: best.com account as per the man pages. Now it insists that I type in my
: passphrase all the time.
1. Use .shosts (not recommended)
2. Use an empty passphrase (ssh-keygen -p will let you change it); don't use
if your machine may have others using it
3. Use the ssh-agent as part of your login process. I have my shell set to
/bin/sh and my .profile includes:
if [ "$TERM" != "" ]; then # don't do this crap for rsh logins
if [ -f /usr/pkg/bin/tcsh ]; then # find "my" shell
SHELL=/usr/pkg/bin/tcsh; export SHELL
if [ -f /usr/pkg/bin/ssh-agent ]; then # see if agent is there
if [ "$SSH_AUTH_SOCK" = "" ]; then # don't run twice
exec /usr/pkg/bin/ssh-agent $SHELL -l
else
exec $SHELL -l
fi
fi
fi
fi
Aty first login, run "ssh-add", which will prompt you for your passphrase,
and ssh-agent will take care of all your authentication until you log out.
See the ssh-agent(8) page for more info; note that running ssh-agent in the
background instead of as a parent of your shell is *not* recommended.
--
-- Todd Vierling (Personal tv@pobox.com; Bus. todd_vierling@xn.xerox.com)