On Friday 14 September 2007, Jordi Molina wrote:

> On 9/14/07, Peter Humphrey <[EMAIL PROTECTED]> wrote:
> > Except that now, instead of being asked for a password, I'm asked
> > for the pass-phrase that belongs to the ssh key.
>
> Create it w/o passphrase.
>
> It's not a big security risk, just ensure that the access of the user
> in the fw machine has restrictive access over its home and that it
> can't su/sudo to root.
>
> Any backup application that sends data unattendedly will have the same
> security concerns, from my point of view it'ld be senseless to start
> now a discussion about this, again.

Or, you can use keychain.
Read these articles for a good introduction to keychain (and ssh key 
management):

http://www.gentoo.org/doc/en/articles/openssh-key-management-p1.xml
http://www.gentoo.org/doc/en/articles/openssh-key-management-p2.xml
http://www.gentoo.org/doc/en/articles/openssh-key-management-p3.xml

http://www.gentoo.org/proj/en/keychain/index.xml

HTH
-- 
[EMAIL PROTECTED] mailing list

Reply via email to