[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#177531: marked as done (www.debian.org: http://www.debian.org/devel/passwordlessssh gives a dangerous advice about ssh)



Your message dated Fri, 21 Mar 2003 20:00:49 +0100
with message-id <20030321190049.GB1050@djpig.de>
and subject line Bug#177531: New version of /devel/passwordlessssh
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Jan 2003 09:23:36 +0000
>From bortzmeyer@nic.fr Mon Jan 20 03:23:36 2003
Return-path: <bortzmeyer@nic.fr>
Received: from maya20.nic.fr [192.134.4.152] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 18aY9X-0003bh-00; Mon, 20 Jan 2003 03:23:35 -0600
Received: from vespucci.nic.fr (postfix@vespucci.nic.fr [192.134.4.68])
	by maya20.nic.fr (8.12.4/8.12.4) with ESMTP id h0K9NXXa1085646;
	Mon, 20 Jan 2003 10:23:33 +0100 (CET)
Received: by vespucci.nic.fr (Postfix, from userid 1055)
	id 69EEAFF95; Mon, 20 Jan 2003 10:23:33 +0100 (CET)
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: www.debian.org: http://www.debian.org/devel/passwordlessssh gives a dangerous advice about ssh
X-Mailer: reportbug 1.50
Date: Mon, 20 Jan 2003 10:23:33 +0100
Message-Id: <20030120092333.69EEAFF95@vespucci.nic.fr>
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=0.6 required=5.0
	tests=SPAM_PHRASE_00_01
	version=2.41
X-Spam-Level: 

Package: www.debian.org
Version: N/A; reported 2003-01-20
Severity: normal
Tags: security

This Web page explains how to set up a remote access (presumably to
Debian machines) with a passwordless SSH key. This is both dangerous
(not every developer is the only root on his machine so setting the
file to 0600 is not enough) and useless (ssh-agent is by default in
the Xsession options, you just have to run ssh-add once when you log
in).

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux vespucci 2.4.18-686 #1 Sun Apr 14 11:32:47 EST 2002 i686
Locale: LANG=C, LC_CTYPE=fr_FR


---------------------------------------
Received: (at 177531-done) by bugs.debian.org; 21 Mar 2003 19:01:09 +0000
>From frank@lichtenheld.de Fri Mar 21 13:01:08 2003
Return-path: <frank@lichtenheld.de>
Received: from sorgfalt.net (mail.sorgfalt.net) [217.160.169.191] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 18wRlM-0005uP-00; Fri, 21 Mar 2003 13:01:08 -0600
Received: from pd95301f7.dip.t-dialin.net ([217.83.1.247] helo=djpig.hell)
	by mail.sorgfalt.net with asmtp (Exim 3.35 #1)
	id 18wRlL-0002HQ-00
	for <177531-done@bugs.debian.org>; Fri, 21 Mar 2003 20:01:07 +0100
Received: from djpig by djpig.hell with local (Exim 3.35 #1 (Debian))
	id 18wRl4-00062n-00
	for <177531-done@bugs.debian.org>; Fri, 21 Mar 2003 20:00:50 +0100
Date: Fri, 21 Mar 2003 20:00:49 +0100
To: 177531-done@bugs.debian.org
Subject: Re: Bug#177531: New version of /devel/passwordlessssh
Message-ID: <20030321190049.GB1050@djpig.de>
References: <[🔎] 20030316180424.GA27026@djpig.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[🔎] 20030316180424.GA27026@djpig.de>
User-Agent: Mutt/1.3.28i
From: Frank Lichtenheld <frank@lichtenheld.de>
Delivered-To: 177531-done@bugs.debian.org
X-Spam-Status: No, hits=-2.5 required=4.0
	tests=IN_REP_TO,REFERENCES,SIGNATURE_SHORT_DENSE,
	      SPAM_PHRASE_00_01,USER_AGENT,USER_AGENT_MUTT
	version=2.44
X-Spam-Level: 

Commited a new version. Should be visible soon.
Added a note about ssh-agent and how to use ssh-add from
~/.xsession. 

Greetings,
	Frank

-- 
*** Frank Lichtenheld <frank@lichtenheld.de> ***
          *** http://www.djpig.de/ ***
see also: - http://www.usta.de/
          - http://fachschaft.physik.uni-karlsruhe.de/



Reply to: