> From: Yves Dorfsman [mailto:y...@zioup.com]
> 
> - you cannot password them

What are you talking about?  Did you read the second half of my post?  Yes, you 
absolutely can password protect ssh keys, even if you started with a 
non-protected key.

What's a better idea, anyway, is that each user should generate his/her own 
personal private keypair, saved securely with their own password encryption, 
and a comment that uniquely identifies the user.  That way, when you have 
employee turnover, you just remove his/her personal public key from the servers.

If everyone is using the same keypair, you have no reliable way of locking out 
former users.
_______________________________________________
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to