SSH password as a command-line parameter?
Daniel Carrera
daniel.carrera at zmsl.com
Sun Jun 18 16:45:14 UTC 2006
Dick Davies wrote:
> You could have a look at ssh-agent(1) for another way, but it's not as
> versatile.
>
> With your existing solution, the passphrase shows up in ps(1), which
> is really bad.
Yes, that's a good point. I'm going for a blank password with an RSA key
now.
> If you're paranoid,
> then check the docs for authorized_keys - you can restrict the blank
> passphrased key to only run certain commands on the server end, while
> using another key for your general use.
Yes, I'm doing that. I made another ssh key solely for this purpose all
it can do is run the backup command.
Cheers,
Daniel.
--
http://opendocumentfellowship.org
"The reasonable man adapts himself to the world; the
unreasonable man tries to adapt the world to himself.
Therefore all progress depends on unreasonable men."
-- George Bernard Shaw
More information about the ubuntu-users
mailing list