How do I gracefully exit/shutdown a "remote" machine?

[Ansar Mohammed]

Hello Guys, 
This is a pretty fascinating thread.. 
How about demonstrating this at the next meeting?

I always use ssh with passwd auth and I have always heard about using key
pair based auth. Is anyone interested in a demo..

Or how about an "auth" day; where we can demo the different types of auth
available.. opie, key pairs, smartcards etc.. and possibly an "auth
protocol" day to demonstrate using different auth protocols eg Kerberos,
LDAP, NIS etc...



-----Original Message-----
From: owner-tlug-lxSQFCZeNF4 at public.gmane.org [mailto:owner-tlug-lxSQFCZeNF4 at public.gmane.org] On Behalf Of James Knott
Sent: July 21, 2005 3:32 PM
To: tlug-lxSQFCZeNF4 at public.gmane.org
Subject: Re: [TLUG]: How do I gracefully exit/shutdown a "remote" machine?

CLIFFORD ILKAY wrote:
> On July 21, 2005 07:05, Peter wrote:
>>On Wed, 20 Jul 2005, CLIFFORD ILKAY wrote:
>>>I disable remote root access on all my machines. How about
>>>disallowing password auth completely and only allowing key based
>>>auth? The drawback of that is if I have to ssh into one of my
>>>machines from a machine which does not have my private key, I
>>>would have to upload my private key there first, which I do not
>>>like doing even though it is protected with a strong passphrase.
>>Get a disk on key and put putty and ssh statically compiled on it,
>>along with your keys and minimal tools to use them.
> 
> I already have that but it does not help when I have to ssh from a 
> remote host to another remote host. How would I plug in this disk on 
> key to a machine in say, Germany, when I am in Toronto so that the 
> machine in Germany could access my private RSA key on the disk on 
> key? Perhaps I could do some sort of remote mount to avoid having to 
> copy my private key onto the remote server.

?????

When you use a key in ssh, you need the key on the computer you're
connecting from.  You carry that around on the USB disk and plug it in
when you need it.  However, as always, when using those keys, you have
to place the corresponding key on the server first.

--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3038 bytes
Desc: not available
URL: <http://gtalug.org/pipermail/legacy/attachments/20050721/04d1b336/attachment.bin>