No subject


Tue Apr 15 14:28:36 EDT 2014


as many times as you want, and will not be asked for a password.

Because of the way we set things up in the lab, this buys you
similar free access to loki, liver, and limey.


NOTES:
- IF YOUR HOME DIRECTORY ON YOUR "PRIMARY WORK MACHINE" IS ON AFS:
  - then the private key can be "sniffed" (stolen) by hackers when it
travels from the AFS server to you. YOU SHOULDN'T BE USING files
in .ssh/ IF IT'S ON AFS. If you're in this kind of situation you
can tell ssh-keygen to store the keys on a directory on the
local disk, and similarly tell ssh-add to read it from the same
directory. Make sure that you're the only ones with read and
write access to that directory.

- You can save typing the "eval ssh-agent" part by putting it into
a startup file or wrapping "ssh-agent" around your window manager.
I won't go into the details here, but if someone cares to post them
to this list they're very welcome.

- If the machine you're logging in TO is a facilitized SCS machine,
you will not be granted Kerberos tokens, meaning that you won't
be able to access files in AFS. There are tricks to get around
that, again too detailed to go into here. I'll just say that if you
want this to work so you can use the said machine to access the
CVS repo, then it will work if you follow the instructions on
the web-site on how to set up CVS access for AFS-ignorant clients.
Again, if you do this, make sure that the machine with AFS on it only
stores you PUBLIC key and does not have the PRIVATE version.


Good luck!

-- 

  Dan Pelleg



More information about the Autonlab-users mailing list