-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jim Bija wrote:

>Can you give more info on that And for gods' sake, SET THE COMMAND=
>PARAMETER in the authorized_keys2 file!
>Thanks!
>Jim.
>I dont see any of that... where can i read about it?

Yeah, it's not where you'd expect it (such as the man page for ssh).  
Rather, it's in the man page for sshd.

- -d


>----- Original Message -----
>From: "Cameron Simpson" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Monday, February 04, 2002 1:02 AM
>Subject: Re: ssh without root password
>
>
>> On 19:07 03 Feb 2002, David Talkington <[EMAIL PROTECTED]> wrote:
>> | The man pages for ssh-keygen and ssh, respectively, will explain how
>> | to create a key for root and where to place it on the target to get
>> | the result you want.  Synopsis:
>> |
>> | # ssh-keygen -t dsa     # formerly ssh-keygen -d
>> |
>> | Accept default save location, no password.  Copy the resulting
>> | id_dsa.pub to target machine.  Then do on the target:
>> |
>> | # cat id_dsa.pub >> /root/.ssh/authorized_keys2
>> |
>> | Double check that the .ssh directories are readable only by root.
>>
>> And for gods' sake, SET THE COMMAND= PARAMETER in the authorized_keys2
>file!
>>
>> Otherwise your key can be abused very readily.
>>
>> Keys without passphrases should be used with extreme care.
>> --
>> Cameron Simpson, DoD#743        [EMAIL PROTECTED]
>http://www.zip.com.au/~cs/
>>
>> Man invented language to satisfy his deep need to complain. - Lily Tomlin
>>
>>
>>
>> _______________________________________________
>> Redhat-list mailing list
>> [EMAIL PROTECTED]
>> https://listman.redhat.com/mailman/listinfo/redhat-list
>
>
>
>_______________________________________________
>Redhat-list mailing list
>[EMAIL PROTECTED]
>https://listman.redhat.com/mailman/listinfo/redhat-list
>

- -- 
David Talkington

PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp
- --
http://setiathome.ssl.berkeley.edu/pale_blue_dot.html

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQA/AwUBPGAlkL9BpdPKTBGtEQKZ9ACg4tJeX+AOL9rvohZYOixpJ0vLJ+oAn34B
fbZ46jY1y15kOHS/6Kh80PnF
=OrHM
-----END PGP SIGNATURE-----




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to