<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>blog.lundscape.com &#187; Secure Shell</title>
	<atom:link href="http://blog.lundscape.com/category/secure-shell/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.lundscape.com</link>
	<description>The Linux Journey</description>
	<lastBuildDate>Thu, 15 Apr 2010 20:06:18 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Bad Bash Sourcing</title>
		<link>http://blog.lundscape.com/2009/03/bad-bash-sourcing/</link>
		<comments>http://blog.lundscape.com/2009/03/bad-bash-sourcing/#comments</comments>
		<pubDate>Wed, 11 Mar 2009 23:32:18 +0000</pubDate>
		<dc:creator>Zachary Lund</dc:creator>
				<category><![CDATA[Secure Shell]]></category>
		<category><![CDATA[Shell]]></category>
		<category><![CDATA[Bash]]></category>
		<category><![CDATA[bashrc]]></category>
		<category><![CDATA[SSH]]></category>

		<guid isPermaLink="false">http://blog.lundscape.com/?p=53</guid>
		<description><![CDATA[A while back I switched such that my .bash_profile sources my .bashrc instead of the reverse. Based on a few sources, this seems to be the preferred approach. Today I decided to push those files to a few servers that haven&#8217;t been updated lately. I transferred my .bash_profile and then my .bashrc:
zac@dakara:~$ scp ~/.environment/bash/bash_profile lansky:~/.bash_profile
bash_profile [...]]]></description>
			<content:encoded><![CDATA[<p>A while back I switched such that my .bash_profile sources my .bashrc instead of the reverse. Based on a few sources, this seems to be the preferred approach. Today I decided to push those files to a few servers that haven&#8217;t been updated lately. I transferred my .bash_profile and then my .bashrc:</p>
<pre>zac@dakara:~$ scp ~/.environment/bash/bash_profile lansky:~/.bash_profile
bash_profile                                  100%  120     0.1KB/s   00:00
zac@dakara:~$ scp ~/.environment/bash/bashrc lansky:~/.bashrc
lost connection</pre>
<p>What happened? My .bash_profile sources my .bashrc, but since I hadn&#8217;t yet replaced the .bashrc, it still sources my .bash_profile. That means infinite loop and that I am an idiot. SSH, rsync, and scp are all broken. There is no way to remove or replace either of those files without another account. I guess it&#8217;s time to open a support ticket at DreamHost.</p>
<p>The moral of the story is to always be careful how you source those files. I usually try to keep an SSH session open on the remote machine when I modify those files in case I break login, but this time I didn&#8217;t. A few searches didn&#8217;t reveal any solutions. I&#8217;d love to know if someone has a way of resolving this without access to another account on the remote machine.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.lundscape.com/2009/03/bad-bash-sourcing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Add an SSH Key to an SSH Agent on a Different Machine</title>
		<link>http://blog.lundscape.com/2009/02/add-an-ssh-key-to-an-ssh-agent-on-a-different-machine/</link>
		<comments>http://blog.lundscape.com/2009/02/add-an-ssh-key-to-an-ssh-agent-on-a-different-machine/#comments</comments>
		<pubDate>Tue, 10 Feb 2009 04:40:49 +0000</pubDate>
		<dc:creator>Zachary Lund</dc:creator>
				<category><![CDATA[Secure Shell]]></category>
		<category><![CDATA[SSH]]></category>
		<category><![CDATA[SSH Agent]]></category>
		<category><![CDATA[SSH Key]]></category>

		<guid isPermaLink="false">http://blog.lundscape.com/?p=9</guid>
		<description><![CDATA[I recently discovered that I can add an SSH key to an SSH agent on a different machine. I find this useful because I am very protective of my SSH keys and prefer to keep them on my desktop (Dakara) and not on my laptop (Adria).]]></description>
			<content:encoded><![CDATA[<p>I recently discovered that I can add an SSH key to an SSH agent on a different machine. I find this useful because I am very protective of my SSH keys and prefer to keep them on my desktop (Dakara) and not on my laptop (Adria).</p>
<p>On Adria, you can see that I have no keys added:</p>
<pre>zac@adria:~$ ssh-add -l
The agent has no identities.</pre>
<p>I then secure shell to Dakara and forward my agent (-A) from Adria. I still have no keys added:</p>
<pre>zac@adria:~$ ssh dakara -A
zac@dakara's password:
No mail.
Last login: Mon Feb  9 17:30:49 2009 from adria.lund
zac@dakara:~$ ssh-add -l
The agent has no identities.</pre>
<p>Next, I add a key from Dakara to my agent on Adria:</p>
<pre>zac@dakara:~$ ssh-add
Enter passphrase for /home/zac/.ssh/id_dsa:
Identity added: /home/zac/.ssh/id_dsa (/home/zac/.ssh/id_dsa)
zac@dakara:~$ ssh-add -l
2048 27:81:f8:7f:38:75:6b:ce:95:e4:46:62:02:9c:84:bd /home/zac/.ssh/id_dsa (DSA)</pre>
<p>When I log out of Dakara, the key is still available on Adria:</p>
<pre>zac@dakara:~$ logout
Connection to dakara closed.
zac@adria:~$ ssh-add -l
2048 27:81:f8:7f:38:75:6b:ce:95:e4:46:62:02:9c:84:bd /home/zac/.ssh/id_dsa (DSA)</pre>
<p>Now my key is available on Adria without ever being on Adria. Even with physical access to my laptop, it would take a sophisticated hacker to steal my SSH key.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.lundscape.com/2009/02/add-an-ssh-key-to-an-ssh-agent-on-a-different-machine/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
