OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Eli Dart (dartnersc.gov)
Date: Tue Jun 11 2002 - 18:13:12 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    You can also edit the public key so that access granted to the
    private key is only for running a given command.

    For example, if you want to check the status of network connections
    on the remote machine periodically, you can do this:

    from="ip_address_of_polling_host",command="/usr/bin/netstat -inb",no-pty,no-port-forwarding,no-X11-forwarding,no-agent-forwarding ssh-dss AAA...(rest of key)

    The output of netstat -inb will show up on stdout on the local
    machine.

                    --eli

    In reply to Lowell Gilbert <lowellworld.std.com> :

    > "jack xiao" <jack_xiao99hotmail.com> writes:
    >
    > > I am ruunig ssh under FreeBSD4.5. It works=A0fine, but I am=A0wondering i=
    > f anybody
    > > has any experience of using ssh without inputing username and password. I=
    > t's
    > > for a cron job on my box...
    >
    > Sure. You use DSA or RSA authentication, and no passphrase.=20=20
    > See the manual.
    >
    > [You need to be very careful about this kind of configuration, though;
    > if possible, give the ssh identity a userid with no login privileges...]
    >
    > To Unsubscribe: send mail to majordomoFreeBSD.org
    > with "unsubscribe freebsd-security" in the body of the message

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (FreeBSD)
    Comment: This is a comment.

    iD8DBQE9BoQILTFEeF+CsrMRAtPWAKCjGNaRrmUdVaHbKgxr/Apt/2XYwQCeLLU6
    kttJfe3I3DicXGhnhKa2JWU=
    =UuYt
    -----END PGP SIGNATURE-----

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-security" in the body of the message