Re:How Not to copy your SSH private key to your servers
by ax0n on Monday April 19, 2010 @12:31PM
(#1277086)
You're absolutely correct, but it's actually pretty common to distribute that public key all over hell and then start shuffling the private one around between the ones you find yourself ssh-ing off of. At my last job, this practice among wayward sysadmins caused me a lot of gnashing of teeth.
[ Parent
| on HN ]
Re:How Not to copy your SSH private key to your servers
by dedward on Monday April 19, 2010 @07:20PM
(#1278142)
Wrong move though - really there should be one key per machine - and then ssh-agent set up properly to take care of the intermediate machines so you can bounce around. Using the same private key on multiple machines is just asking for trouble when you need to revoke something...
Re:How Not to copy your SSH private key to your servers
by ax0n on Tuesday April 20, 2010 @12:33AM
(#1278640)
Oh, believe me, I know. That's why I said it caused me much gnashing of teeth. SSH, particularly OpenSSH, is such a thing of beauty. It's a shame most sysads that I've dealt with abuse it like it's rsh and telnet.