[NTLUG:Discuss] ssh, ssh-agent, and ssh-add

[kbrannen@gte.net]

Tom Woody wrote:

 > Just got back from the ssh presentation, and a great one it was...


Bummer, I really wanted to go...


 >
 > if I run: ssh-agent tcsh
 > then run: ssh-add
 > type in my passphrase...my key is loaded and I am ready to connect.  My 
problem is that if I close the window where I have done the agent stuff, then 
I have to do it all again before I can connect to my hosts again.
 >
 > Is there a way to load the agent, and add the keys 1 time and have them be 
available to workstation, and any subsequent windows that are opened?
 >
 > I use ssh so much throughout the day from my linux workstation to the 
machines I maintain (using X11) that Its just as much a hassle to type in the 
passphrase, as it is to type in a password.
 >
 >


Yes.  I don't know if MadHat mentioned it, but there are 2 great articles on 
the practical usage of [open]ssh on the IBM web site.  See:

http://www-106.ibm.com/developerworks/linux/library/l-keyc.html?dwzone=linux
http://www-106.ibm.com/developerworks/library/l-keyc2/?loc=setheme

In the 2nd one, the author discusses ssh-agent and a way to only run that once 
per login via a program called keychain (so if you don't log out very often, 
and your workstation is physically secure, you're set for a *long* time as we 
all know how stable Linux is. :-)  I've used keychain for about a week and it 
work quite well.

HTH,
Kevin