<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Computer Support &#187; passwordless</title>
	<atom:link href="http://www.xiitec.com/blog/tag/passwordless/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.xiitec.com/blog</link>
	<description></description>
	<lastBuildDate>Wed, 30 Dec 2009 08:40:28 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Passwordless Logins with keychain</title>
		<link>http://www.xiitec.com/blog/2008/02/05/passwordless-logins-with-keychain/</link>
		<comments>http://www.xiitec.com/blog/2008/02/05/passwordless-logins-with-keychain/#comments</comments>
		<pubDate>Wed, 06 Feb 2008 01:13:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Remote access]]></category>
		<category><![CDATA[keychain]]></category>
		<category><![CDATA[login]]></category>
		<category><![CDATA[passwordless]]></category>

		<guid isPermaLink="false">http://www.xiitec.com/blog/?p=102</guid>
		<description><![CDATA[First, set up your system to use ssh-agent. Then use keychain to keep your SSH passphrases alive, system-wide, until you reboot. keychain also makes it possible to run SSH transfers from cron.
Download and install keychain from the usual sources; it comes in RPMs, .debs, and sources. Then edit your local ~/.bash_profile, adding these lines:
keychain id_dsa
. [...]]]></description>
			<content:encoded><![CDATA[<p>First, set up your system to use ssh-agent. Then use keychain to keep your SSH passphrases alive, system-wide, until you reboot. keychain also makes it possible to run SSH transfers from cron.</p>
<p>Download and install keychain from the usual sources; it comes in RPMs, .debs, and sources. Then edit your local ~/.bash_profile, adding these lines:</p>
<blockquote><p>keychain id_dsa<br />
. ~/.keychain/$HOSTNAME-sh</p></blockquote>
<p>Use the real name of your private key: <code>id_rsa, my_own_groovy_key</code>, whatever. Be sure to use the leading dot on the second line; this tells Bash to read the file named on the line.</p>
<p>That&#8217;s all you have to do. Now when you log in to your local workstation, a keychain prompt will appear, asking for the passphrase of your key. keychain will handle authentications until the system reboots.</p>
<p>You can name as many keys as you wish to use, like this:</p>
<blockquote><p>keychain id_dsa  apache_key  ftp_key</p></blockquote>
<p>You&#8217;ll enter the passphrase for each one at system login. Then keychain will handle authentications as long as the system stays up, even if you log out and log back in a few times. When you restart the system, you start over.</p>
<p>A lot of documentation tells you to use null passphrases on keys generated for servers, to enable unattended reboots. The risk is that anyone who gets a copy of the private key will be able to easily misuse it. As always, you&#8217;ll have to decide for yourself what balance of convenience and security is going to serve your needs.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.xiitec.com/blog/2008/02/05/passwordless-logins-with-keychain/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

