Subject: Re: Re: Re: ssh-add and crontab
To: Martin Husemann <martin@duskware.de>
From: Joel CARNAT <joel@carnat.net>
List: netbsd-users
Date: 03/17/2005 16:02:28
Dans l'épisode précédent (Thu, Mar 17 2005 - 15:36), Martin Husemann nous apprenait que :
> On Thu, Mar 17, 2005 at 03:32:15PM +0100, Joel CARNAT wrote:
>
> > your script looked a bit complex for me...
> > so I used the SSH_AUTH_SOCK/SSH_AGENT_PID way of doing it.
>
> I might be missing the whole point of this, but using an artificial
> connection to a differen ssh-agent sounds a bit strange to me.
>
I don't get the "artificial" notion.
I mean, I do use ssh-agent for other connections anyway.
My question was (how) to have cron's job know about already running ssh-agents.
Having my cron job getting its env variable (that I have in all my
XTerm because they are set from .xsession) don't sound "artificial" to
me :)
> Why don't you just create another key soley for this purpose, without
> a passphrase, and let the cron jobs use that?
I used to use that - the SSH key I used to automatically upload/download things
to my home used to have no passphrase. I just felt it was more secure to set a
passphrase and use the ssh-agent feature.
Of course, having a passphrase-free key and sudo configured to allow
only a bunch of commands for the user connecting with this passphrase is
my usual way of doing this. Furthemore, this way of connecting will
still work when I'm not loggued on the workstation, whereas the
'ssh-agent solution' probably won't when I logoff (because I guess
ssh-agent will terminate).
Maybe I'll discover this way of doing things really sux (for whatever
reasons). My primary goal was : right, I have ssh-agent running that
allows me to enter my passphrase only once ; what more can't I do with
this tool ? :)
--
,-- This mail runs ---------.
`------------ NetBSD/i386 --'