openssh passwordless and secure

[Pedro Sousa]

Hi people!
Can someone tell me where can I download 'keychain' for HPUX and Solaris?
I'm trying to implement the openssh with a passphrase, but I want it to be passwordless.
The keychain product is the only I know of to do this.

tia!
Pedro

[harry d brown jr]

http://www.gnu.org/directory/keychain.html

live free or die
harry

[Martin Burnett_2]

Hello Pedro,

How about ssh_askpass-1.2.0

This is an X11-based passphrase dialog for use with OpenSSH. It is intended to replace the Perl/Tk-based ssh-askpass dialog and GNOME-based ssh-askpass dialog which formerly accompanied OpenSSH-1.2. These dialogs are intended to be called from the ssh-add program and not invoked directly.

http://eigen.ee.ualberta.ca/hppd/hpux/Networking/Misc/ssh_askpass-1.2.0/

HTH

Martin

[Pedro Sousa]

thanks harry.
but I cannot find any keychain for hpux!

Martin, I want something to work even with crons. Imagine that I want to have a cron job that does a ftp to another box, I want it to be passwordless.

thanks!

[Darrell Allen]

Hi Pedro,

You could elect to set up a key with a null passphrase. That could be a security risk but depending on how trusted your environment is (not refering to HPUX trusted system) and how securely you have it locked down, you may be willing to take that risk.

Darrell

[Pedro Sousa]

Darrell.
Thanks, but I already reached that point :).

I'm not using the HP trusted system option, but everything I read about passowrdless openssh, advises to use keychain instead of null passphrases. Although, when using these null passphrases, the main problem seems to be related to permissions of key files.

[Ray Carlson]

Have you thought about using Kerberos?

[Mark Fenton]

Pedro, the keychain script that Harry pointed you to is just that, a script, (here attached). You can edit it to point to your ssh installation (I added mine in /opt/openssh2/bin) and it should run right off.

Hope you get your ssh issues solved!

Mark