everythingcli

Hi everybody,

I am looking for people who are willing to try this out and give some feedback. Anyone interested in helping out? :-)

thx

What sub did u find it in?

Do you have any material I can read up on to this?

you could still append this option: `autossh -oControlPersist=yes|no"`

> If a root user is able to convince his ssh client to use another user's agent, root can impersonate that user on any remote system which authorizes the victim user's public key.

Yes, root can also simply `su - user` and then do all stuff you do.

But you should also not put YOUR private keys on a system that has a root user who should not have access YOUR keys.

@Tiksi:

Couldn't reply to your thread directly, so here:

It shouldn't be a problem when someone steels your key. At least not when it is protected with a strong password.

As I said, you can and should always use `ssh-agent` and protect all of your keys with a password.

Now that it was mentioned, I am really not sure, if `ssh-agent` also works for processes started by `cron`.

This is not how it is meant. When you use AutoSSH/SSH and need to enter a password for your key anytime you do a connection (which probably happens every 10min as a system engineer/admin/etc) it is probably useless.

I have many different SSH keys, each with different long passwords.

What u are looking for is `ssh-agent` which can take care of all the password handling.

Also unattended rsync (over ssh) backups rely on no user interaction at all.

Sorry for the caps, was copy/paste.