On Mon, 2011-01-31 at 18:48 +0000, Anne Wilson wrote:
On Monday 31 January 2011 16:21:17 Kevin Kofler wrote:
> Anne Wilson wrote:
> > The Keychain man page. It specifically says that it must be in the
> > script if the script is to be run by a cron job. At least, that's what
> > I understand it to say.
> Well, to be able to ssh to a remote machine without any passwords or
> anything like keychain:
> 1. make sure you have an SSH key, normally ~/.ssh/id_rsa
> 2. make sure there is no passphrase set on that key; if there is, remove it
> (change it to the empty string) using "ssh-keygen -p"
> 3. make sure your public key (normally ~/.ssh/id_rsa.pub) is listed in
> ~/.ssh/authorized_keys on the remote server, if not, add it there
> 4. try ssh to the remote server, it should not ask you for any password or
Everything is set up exactly as you say, except that there is a passphrase.
Surely you lose security if you remove it? I don't suppose the risk on my LAN
is too great, but I do try to work as securely as I can. Are you thinking
that I'm being over-cautious?
If you have a valid key pair, why would you need a passphrase? The
session will use the key pair for authentication and encryption. Your
copy of the RSA info is already protected within your machine by being
readable only by you and processes you own, including the ones run from