[Beowulf] Question about root login(s)

[Geoff Jacobs]

Nelson Castillo wrote:
> On 10/18/06, Geoff Jacobs <gdjacobs at gmail.com> wrote:
>> Tim Moore wrote:
>> > Hello All -
>> >
>> > I just upgraded  the OS on my cluster and to satisfy security,
>> > implemented ssh.  The old cluster used rsh and rlogin.  I developed
>> some
> 
> Cool.
> 
>> Replicate the .ssh directory from root on the login node to root on all
>> the rest. Make sure permissions are retained.
> 
> I don't like to replicate the .ssh because someone who gets to
> be root in one of the nodes can connect back to your machine.
> 
> I prefer to use ssh without password from mi login machine to
> cluster nodes.
> 
> http://wiki.freaks-unidos.net/ssh%20without%20password
> 
> Regards.
> 
The keys can be generated with a password, which is cached using a
keychain. Per-user keys are more secure than interactive password
authentication.

-- 
Geoffrey D. Jacobs

Go to the Chinese Restaurant,
Order the Special