Re: Connecting to machines

Please see my answer to your duplicated question, regarding using host keys instead of storing passwords in cleartext.

That's not using Perl, but more of a security/sysadmin approach...

--
Cheers, Joe

Comment on Re: Connecting to machines

Replies are listed 'Best First'.
Re: Re: Connecting to machines by joe++ (Friar) on Oct 18, 2002 at 08:30 UTC
Yet another note on connecting between unix/linux boxen using ssh. Again, not Perl related. Although there are a few Perl wrappers available (search CPAN for Net::SSH) the real challenge is to connect securely. Storing passwords in files, especially cleartext Perl files, is not regarded secure in any way! The alternative is to setup (Open-)SSH for using host keys, better yet, using the ssh-agent utility. IBM DeveloperWorks has some excellent articles on this matter. I don't want to repeat these here, so just links: Devworks: Open SSH Key Management - introduction ssh keys Devworks: Open SSH 'ssh-agent' and 'keychain' - advanced and really secure options Devworks: Open SSH Agent forwarding - more features and improvements For Windows you can use Putty which provides many of the SSH features through commandline utilities. -- Cheers, Joe Update: corrected link 2 and added link 3	[reply]

Replies are listed 'Best First'.

Re: Re: Connecting to machines
by joe++ (Friar) on Oct 18, 2002 at 08:30 UTC

Although there are a few Perl wrappers available (search CPAN for Net::SSH) the real challenge is to connect securely. Storing passwords in files, especially cleartext Perl files, is not regarded secure in any way!

The alternative is to setup (Open-)SSH for using host keys, better yet, using the ssh-agent utility.

IBM DeveloperWorks has some excellent articles on this matter. I don't want to repeat these here, so just links:

Devworks: Open SSH Key Management - introduction ssh keys
Devworks: Open SSH 'ssh-agent' and 'keychain' - advanced and really secure options
Devworks: Open SSH Agent forwarding - more features and improvements

Putty

--
Cheers, Joe

Update: corrected link 2 and added link 3

[reply]