RE: ssh-agent with default runlevel of 5

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> -----Original Message-----
> From: Keith Morse
> Sent: Sunday, February 16, 2003 2:36 AM
> Subject: Re: ssh-agent with default runlevel of 5
> 
> 
> On 15 Feb 2003, Gordon Messmer wrote:
> 
> > On Sat, 2003-02-15 at 01:32, Keith Morse wrote:
> > 
> > > And to the original poster, I like to append to what 
> > > Gordon has said above.  RedHat has documented this at
> > > 
> > > 
> > >
http://www.redhat.com/docs/manuals/linux/RHL-8.0-Manual/custom-guide/s1-open
ssh-client-config.html#S3-OPENSSH-SSH-AGENT-WITH-GNOME
> >
> > Cool... but odd.  Step 2 should be entirely unnecessary.
>
>
> AFAICT, these directions have remained virtually unchanged
> since I first saw them in the 7.X distributions.  My question
> to your comment would be, how does ssh-agent get started
> without step 2?

Dependent upon what display manager you have configured at runlevel 5 --
gnome or kde is started by way of ssh-agent on RH-8.0 (checkout either
/etc/X11/xinit/xinitrc or /etc/X11/xdm/Xsession).

I like the fact that RH-8.0 starts gnome by way of ssh-agent, but my saved
gnome session starts 3 gnome-terminals with 4 tabs each. All tabs are
connecting to remote systems using ssh. So the above link instructions were
basically useless and seemed redundant (why would I want to start ssh-agent
again?) So I tried substituting step 2 with ssh-add, but then I was prompted
for 12 ssh-add passphrases when my gnome-terminal/tabs started. Bzzzttt!!!
So to fix this problem, I added ssh-add to
/usr/share/apps/switchdesk/Xclients.gnome so that I was prompted for the
ssh-add passphrase right after the gnome login screen (prior to gnome
starting). By doing so, my ssh-add passphrase was inherited by all
gnome-terminals/tabs executing ssh.

Obviously, my solution has its pros/cons:

Pros: No longer have to enter 12 passphrases when gnome-terminal (ssh)
starts.

Cons: 

1) Modifying Xclients.gnome is global. i.e. Should only be impelemented on a
personal workstation where no other users login and you don't plan on using
switchdesk.

2) As with any implementation of ssh-agent/ssh-add... one needs to lock down
their desktop by setting a screensaver to like 5 minutes and prompt for a
password to unlock. Don;t need anyone sitting down at my desktop while I'm
away with all those passphrases enabled.

Other than that, I have been very happy with RH-8.0 and how
ssh-agent/ssh-add was implemented.

Steve Cowles 



-- 
Psyche-list mailing list
Psyche-list@redhat.com
https://listman.redhat.com/mailman/listinfo/psyche-list

[Index of Archives]     [Fedora General Discussion]     [Red Hat General Discussion]     [Centos]     [Kernel]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux