I am sorry for the lack of posts here, I recently changed positions which has kept me fairly busy. I just started at MIT in their application infrastructure services group and have been focusing on my new position more than my blogs. This weekend I started reading and came across a post from Kris at Geekbits3 that was relevant to me and I am sure will be relevant to all admins that manage a large number of UNIX hosts.
On most Corporate networks, telnet is disabled and ssh is required for connectivity between Unix hosts. SSH requires a password and depending on how it is configure, could also require a key phrase.
Kris outlines a secure configuration of connecting to your hosts with SSH that eliminates the need for a password or an SSH key phrase. This process needs to be followed on all of your servers, however once in place will increase your efficiency and provide you with extend remote support on all of your servers.
Here is an overview of Kris's post ......
I've recently set-up a new backup server, I wanted to be able to automate backups from my workstations to the server. I will be using OpenSSH
(scp) as the transfer agent between the workstations and the server. By default the OpenSSH server asks for a password every time you login, therefore automation is impossible, without a bit of tweaking.
Creating an environment where passwords are unnecessary can be achieved using public-key cryptography
. In this process we create unique identification between workstation (or other system) and server. The server can then recognize the user using a private/public key pair.
There are a number of steps that need to be completed, on both workstation and server, to achieve password-less logins. I have written the required server commands within the `ssh' command, to simplify the process. You will need to have a working OpenSSH server, and user login before beginning.
Read the rest of Kris's SSH entry ...
Technorati : Support, System Administration, Unix