Follow this link to skip to the main content

SSH Agent

How to setup remote operations for remote CVS

For doing remote ssh to other systems from oriole run:

setenv CVS_RSH ssh1

To supress the cvs keyword modifications when checking in. There is a sticky tag '-ko' that leaves them alone, so if I do the following with the claraty files I'm checking in locally everything works out fine:

cvs add -ko <file>
cvs update -ko

Currently the following modules are mirrored over into our repository with no differences (other than Makefiles) from the ones in your claraty repository:
share, arrays, matrices, arrays, points, transforms, sockets

There is also a script to help keep them synchronized, which together
with the -ko flag means that it has just become much easier to
maintain the mirroring.

Overview of commands for oriole:

ssh-keygen1 -C <comment>

Creates a key, private in ~/.ssh/identity, public in ~/.ssh/identity.pub
Need to put public key in ~/.ssh/authorized_keys on server machine
in order to work. You have to restrict access for it to work:

 chmod 600 ~/.ssh/authorized_keys
 



    
  ssh-agent1 <command>


     Children of command will use agent, for example "ssh-agent
    xterm"

    
  ssh-add1


     Run in child of ssh-agent, will prompt for passphrase.

    
  ssh-add1 -l


     Lists currently authenticated keys

Actual commands to type to test on a single system (if it works for user on a given machine to ssh as themselves to that same machine it should work overall):

ssh-keygen1
<Hit enter to use default ~/.ssh/identity file>
<Type an RSA passphrase -- this should be 10-30 characters long
and essentially becomes your password for using ssh-agent, and
should be different than your yp or afs password>

cd ~/.ssh
cat identity.pub > authorized_keys
chmod 600 ~/.ssh/authorized_keys
ssh-agent1 tcsh
<This spawned a new shell, future commands are in the new shell>
ssh-add1
<Type your RSA passphrase, same as you gave to ssh-keygen>
ssh1 localhost
<If this works, then the server ssh-agent is working properly,
otherwise you can keep trying from this shell without having to
retype your passphrase. If you're not certain that you are in the
right shell, do 'ss-add1 -l' and see if it prints out your public
key or not, and if not start procedure over from 'ssh-agent1' on>

From Anne Wright