[ILUG] Passwordless SSH access

[kevin lyda]

On Mon, Mar 18, 2002 at 03:50:23PM +0000, Niall O Broin wrote:
> Is there a good way of doing this ? I know that one way is to have a key
> with a null keyphrase, and another way is to have sshagent running. The null
> passphrase is a problem if the destination box is ever cracked, and I'm not
> sure how sshagent works when you need to have background scripts (e.g.
> launched from cron) using ssh. I don't suppose there is a magic bullet, but
> I'm open to suggestions.

i use this script when i log in initially (~/bin/auth - run from my
.zlogin):

    #!/bin/sh
    if ps aux | grep -q '$USER.*ssh-agent'; then
	exit 0
    fi
    export SHELL=/bin/sh
    ssh-agent > $HOME/bin/.ssh-env
    . $HOME/bin/.ssh-env
    echo "export SSH_AGENT_PID=$SSH_AGENT_PID" > $HOME/bin/.ssh-env
    echo "export SSH_AUTH_SOCK=$SSH_AUTH_SOCK" >> $HOME/bin/.ssh-env
    echo "setenv SSH_AGENT_PID $SSH_AGENT_PID" > $HOME/bin/.ssh-env.csh
    echo "setenv SSH_AUTH_SOCK $SSH_AUTH_SOCK" >> $HOME/bin/.ssh-env.csh
    ssh-add ~/.ssh/identity ~/.ssh/id_dsa

in my .zlogin it goes like this:

    auth
    source $HOME/bin/.ssh-env

i source $HOME/bin/.ssh-env in my scripts.

kevin

-- 
kevin at suberic.net          buffy: come on, can't you put your foot down?!
fork()'ed on 37058400      giles: it *is* down.
meatspace place: orbit     buffy: one of these days you're going to have to
http://suberic.net/~kevin         get a grown up car.  --inca mummy girl