NYCPHP Meetup

[Tim Sailer]

On Wed, Aug 10, 2005 at 09:35:15AM -0400, David Mintz wrote:
> As for the passwordlessness, yes of course you're right. Problem is there
> are some things cron does over ssh from here to other machines out there
> (outside out intranet) and I haven't figured out how to do them with --
> pardon them expression? -- nonpasswordless keys. I have read somewhere
> about ways to limit the command set that can be executed on the remote
> server, shoulda bookmarked that page.

man sshd. :) I use the command parameter quite a bit for passwordless
keys. You simply have 'command=whatever' at the beginning of the key
in authorized_keys. Most of what I use it for is rsync backups from a
certain machine.

Tim

-- 
Tim Sailer <sailer at bnl.gov> 
Information and Special Technologies Program
Office of CounterIntelligence 
Brookhaven National Laboratory  (631) 344-3001