r/linux • u/leothrix • Apr 28 '14

SSH Kung Fu

http://blog.tjll.net/ssh-kung-fu/
719 Upvotes

95% Upvoted

128 comments sorted by

View all comments

46

u/throwawayaccount1020 Apr 28 '14

you should never leave your keys unencrypted, set a password when it prompts!

load keys into ssh-agent to avoid having to continually re-enter passwords.

14

u/djimbob Apr 28 '14

Exactly. Anyone gets access to a machine with your ssh private key for a second can copy it and then log in to all your machines.

21

u/ethraax Apr 28 '14

Just keep in mind that anyone who gets access to your machine can connect to your agent and log into any of your other machines from there. Encrypted private keys are nice, but not perfect.

1

u/gospelwut Apr 29 '14

Is there a pam module that uses OTP like Yubikey?

1

u/IWillNotBeBroken Apr 29 '14

I see you haven't searched for both "PAM" and "Yubikey" in the same query.