Using ssh keys to login Yaakoub Youssef El Khamra https://conferences.xsede.org/c/message_boards/find_message?p_l_id=&messageId=618888 2013-11-06T16:21:44Z 2013-11-06T16:21:44Z

I can recommend the use of an ssh-agent, it helps tremendously. Also for large file transfers I will also recommend globus online.<br /><br />A quick google search for ssh-agent how to:<br />http://superuser.com/questions/8077/how-do-i-set-up-ssh-so-i-dont-have-to-type-my-password<br /><br />And globus online:<br />https://www.globusonline.org/<br /><br /><br />Regards<br />Yaakoub

Yaakoub Youssef El Khamra 2013-11-06T16:21:44Z David LeBauer https://conferences.xsede.org/c/message_boards/find_message?p_l_id=&messageId=618870 2013-11-06T16:16:39Z 2013-11-06T16:16:39Z

Hi Yaakoub,<br /><br />Thanks for the suggestions and for identifying a security concern!<br /><br />But doesn&#039;t using a passphrase require the user to enter the passphrase each time a connection is opened? One of the primary reasons that I use sshkeys is to automate scripts that move files, launch jobs, etc, from my local machine (plus it makes login faster). <br /><br />What would be the recommended way to scp within a program without having to either enter a password, or hardcoding the password in the source code?<br /><br />I enter a password to login to my local machine; isn&#039;t that sufficient?

David LeBauer 2013-11-06T16:16:39Z Yaakoub Youssef El Khamra https://conferences.xsede.org/c/message_boards/find_message?p_l_id=&messageId=618846 2013-11-06T15:57:49Z 2013-11-06T15:57:49Z

Regarding the script: watch out. You are setting an empty pass phrase on line 26.<br /><br /># create ssh key and add to config file<br />if [ ! -e ~/.ssh/${SERVER} ]; then<br /> ssh-keygen -q -t rsa -N &#034;&#034; -f ~/.ssh/${SERVER}<br /><br />This is great way to make compromising your account very easy. <br /><br />Regards<br />Yaakoub

Yaakoub Youssef El Khamra 2013-11-06T15:57:49Z Yaakoub Youssef El Khamra https://conferences.xsede.org/c/message_boards/find_message?p_l_id=&messageId=618834 2013-11-06T15:53:01Z 2013-11-06T15:53:01Z

I strongly suggest you copy your key to authorized_keys2 instead of authorized_keys to avoid any mpi_spawn errors. Standard security precautions apply: use a strong password for your key, keep it somewhere safe, make sure permissions are locked down etc... <br /><br />Regards<br />Yaakoub

Yaakoub Youssef El Khamra 2013-11-06T15:53:01Z David LeBauer https://conferences.xsede.org/c/message_boards/find_message?p_l_id=&messageId=618674 2013-11-06T04:55:11Z 2013-11-06T04:55:11Z

This script: works for me: https://github.com/PecanProject/pecan/blob/master/scripts/sshkey.sh

David LeBauer 2013-11-06T04:55:11Z Edmund Highcock https://conferences.xsede.org/c/message_boards/find_message?p_l_id=&messageId=591158 2013-09-12T09:03:54Z 2013-09-12T09:03:54Z

Is this possible to login using ssh keys or has this been disabled? I have copied my dsa public key to authorized_keys, but I am still being asked for my password.<br /><br />Thanks,<br /><br />Edmund

Edmund Highcock 2013-09-12T09:03:54Z