Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-14 Thread Daniel Jacobowitz
On Thu, Sep 13, 2001 at 01:00:11PM -0400, Brian Sniffen wrote: > > These are not equivalent situations. If the machine is turned off, > keychain's keys are removed from memory. The passphraseless key is > still on disk. It's also significantly harder to get the key out of > ssh-agent's memory t

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Brian Sniffen
These are not equivalent situations. If the machine is turned off, keychain's keys are removed from memory. The passphraseless key is still on disk. It's also significantly harder to get the key out of ssh-agent's memory than it is to read it off of disk. Keychain is inappropriate for many sit

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Martijn van Oosterhout
On Thu, Sep 13, 2001 at 09:44:06AM -0500, Cesar Mendoza wrote: > That is the setup I have (a especial key just for the cronjob, but since > it is runing under my user name, I like to use ssh-agent to add my other > keys, then delete them when the session is over), but I want the key to > have pa

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Cesar Mendoza
On Thu, Sep 13, 2001 at 06:46:57AM -0500, Steve Greenland wrote: > On 12-Sep-01, 19:08 (CDT), Cesar Mendoza <[EMAIL PROTECTED]> wrote: > > > > I find the package useful and I'm also aware of the shortcomings of > > ssh-agent, but was your solution to cron job's that do rsync over ssh? > > and I d

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Daniel Jacobowitz
On Thu, Sep 13, 2001 at 01:27:05PM +0200, Richard Atterer wrote: > Indeed. > > You might want to experiment with the following: Create a dedicated > user on the machine that you log into, whose default shell is not > /bin/sh, but a script of yours which executes rsync with the right > options, no

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Richard Atterer
On Wed, Sep 12, 2001 at 11:06:30PM -0400, Daniel Jacobowitz wrote: > Keychain is functionaly equivalent to a passphraseless key, though. Exactly my point! The only additional thing you get with keychain is a false sense of security. On Wed, Sep 12, 2001 at 07:08:32PM -0500, Cesar Mendoza wrote:

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-13 Thread Steve Greenland
On 12-Sep-01, 19:08 (CDT), Cesar Mendoza <[EMAIL PROTECTED]> wrote: > > I find the package useful and I'm also aware of the shortcomings of > ssh-agent, but was your solution to cron job's that do rsync over ssh? > and I don't think that pass phrase less keys is an option. Why not? Create a ded

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Daniel Jacobowitz
On Wed, Sep 12, 2001 at 07:08:32PM -0500, Cesar Mendoza wrote: > I find the package useful and I'm also aware of the shortcomings of > ssh-agent, but was your solution to cron job's that do rsync over ssh? > and I don't think that pass phrase less keys is an option. What you are > doing is building

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Jacob Kuntz
On Wed, Sep 12, 2001 at 07:08:32PM -0500, Cesar Mendoza wrote: > On Wed, Sep 12, 2001 at 01:05:12PM +0200, Richard Atterer wrote: > > On Tue, Sep 11, 2001 at 03:00:44PM -0500, Cesar Mendoza wrote: > > What's really needed is a little work on ssh-agent so that > > - when ssh asks for a DSA passphras

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Cesar Mendoza
On Wed, Sep 12, 2001 at 01:05:12PM +0200, Richard Atterer wrote: > On Tue, Sep 11, 2001 at 03:00:44PM -0500, Cesar Mendoza wrote: > > Package: wnpp > > Severity: whishlist > ^ typo I know and the ITP was reassigned to wishlist. > > From the keychain help: > > > > Keychain is an Open

Re: Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-12 Thread Richard Atterer
On Tue, Sep 11, 2001 at 03:00:44PM -0500, Cesar Mendoza wrote: > Package: wnpp > Severity: whishlist ^ typo > From the keychain help: > > Keychain is an OpenSSH key manager, typically run from > ~/.bash_profile. When run, it will make sure ssh-agent is running; > if not, it will s

Bug#112020: ITP: keychain -- An OpenSSH key manager

2001-09-11 Thread Cesar Mendoza
Package: wnpp Severity: whishlist From the keychain help: Keychain is an OpenSSH key manager, typically run from ~/.bash_profile. When run, it will make sure ssh-agent is running; if not, it will start ssh-agent. It will redirect ssh-agent's output to ~/.ssh-agent, so that cron jobs that ne