Okay, yes, setting SSH_AUTH_SOCK is the right thing to do, but this strikes me as clumsy. I'm trying to understand how things should be set up so that I don't have to take special action each time I log in. Do I do some .login/.logout magic?

Or, why not just go without a DSA passphrase? The passphrase only protects me from root, before whom I am rather powerless anyhow.

Also, the OMPI FAQ says authorized_keys should have 644 protection. Out on the web, it appears people advise 600, which doesn't make sense to me since it just has public keys in it anyhow. (My head is starting to spin.)

Kenneth Yoshimoto wrote:

After you start up ssh-agent once, check env for SSH_AUTH_SOCK

If you start a new session and the old ssh-agent is still running, try setting SSH_AUTH_SOCK.

I think there are more refined utilities out there to handle this situation...

On Fri, 19 Feb 2010, Eugene Loh wrote:

Date: Fri, 19 Feb 2010 13:19:13 -0800
From: Eugene Loh <eugene....@sun.com>
Reply-To: Open MPI Users <us...@open-mpi.org>
To: Open MPI Users <us...@open-mpi.org>
Subject: [OMPI users] password-less ssh

This is with regards to http://www.open-mpi.org/faq/?category=rsh#ssh-keys

It says to check if you have an ssh-agent running. How are you supposed to do that? I've tried "ps -u myusername | grep ssh-agent", but didn't know if that's the proper thing to do.

Also, it appears that I do *NOT* have an ssh-agent running automatically for me. How often do I have to start one up? It appears that if I start one up and log out and then log back in again, the old ssh-agent is still there but not usable. I have to start up a new one. So, do I have to start an ssh-agent each time I log in?

Or, I could use no DSA passphrase, but that seems to be frowned upon.


Reply via email to