‹ Star Trek: Blame the iPhone •
corprewland » set up ssh for no remote password login
Passwords are not particularly secure. It’s hard to make, remember, and use one that is hard for programs to guess. Therefore, people who case about security frequently use a package called OpenSSH for logging into remote hosts to work instead of telnet.
I’ve been working with a bunch of people for the last while, who wanted to have their sessions logging into remote machines not be trivially snoopable and also wanted to not have to remember their passwords for a bunch of machines. I wrote up a set of instructions based on openssh that are designed to make this relatively straightforward.
This is how I normally use remote unix boxes — set my password to an ludicrously long, difficult to crack/remember/whatever string and then use ssh and public key encryption to actually log in. It works for me. These instructions are probably most useful for MacOSX and other unix (Linux) users (and MS Windows users using cygwin on the command line.) Most Windows users will want to use Putty, which is a fine package of encryption tools for that platform.
Technorati Tags: ssh, security, password, openssh, login, remote login

2 comments
Comments feed for this article
Trackback link
http://www.corprew.org/blog/2007/01/11/ssh-secure-logins-no-remote-passwords-and-other-network-security-goodness/trackback/
2007 January 15 at 5:12 pm
XOWEUN1
Array
2007 January 17 at 3:31 pm
Jesse Robbins
Windows users are usually the most unfamiliar with ssh, and so I’d pass along the following:
1) Putty isn’t just for logging into your favorite *nix system, it’s also great for creating secure tunnels, useful for getting through pesky corporate firewalls or just keeping your stuff private. Think of it as a VPN-lite
2) You should really use an ssh-agent, which allows you to type in your password once.