Bureaucrats, cc_docs_admin, cc_staff, rsnt_translations
2,837
edits
SSH configuration file: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 21: | Line 21: | ||
Note that you need to install your public [[SSH Keys | SSH key]] on each cluster separately or use [[SSH Keys#Using CCDB | CCDB]]. | Note that you need to install your public [[SSH Keys | SSH key]] on each cluster separately or use [[SSH Keys#Using CCDB | CCDB]]. | ||
Note that other options of the <code>ssh</code> commands have corresponding parameters that you can put in your <code>~/.ssh/config</code> file on your machine. In particular, <code>-X</code> (X11 forwarding) | Note that other options of the <code>ssh</code> commands have corresponding parameters that you can put in your <code>~/.ssh/config</code> file on your machine. In particular, the command line options | ||
* <code>-X</code> (X11 forwarding) | |||
* <code>-Y</code> (trusted X11 forwarding)* | |||
* <code>-A</code> (agent forwarding) | |||
can be set through your configuration file by adding lines with | |||
* <code>ForwardX11 yes</code> | |||
* <code>ForwardX11Trusted yes</code> | |||
* <code>ForwardAgent yes</code> | |||
in the corresponding sections of your configuration file. Note however that we do not recommend doing so in general. Enabling X11 forwarding by default for all of your connection can slow down your sessions, especially if your X11 client on your computer is misconfigured. | |||
Similarly, while forwarding your SSH agent is convenient, and is more secure than typing a password on a remote computer, it still comes with a risk. Should the server to which you are connecting to be compromised, a privileged user (<code>root</code>) could use your agent and connect to another host without your knowledge. That is why we recommend to use agent forwarding only when you need it. We also recommend that if you use this feature, you should combine it with <code>ssh-askpass</code>, so that any use of your SSH agent triggers a prompt on your computer, preventing usage of your agent without your knowledge. | Similarly, while forwarding your SSH agent is convenient, and is more secure than typing a password on a remote computer, it still comes with a risk. Should the server to which you are connecting to be compromised, a privileged user (<code>root</code>) could use your agent and connect to another host without your knowledge. That is why we recommend to use agent forwarding only when you need it. We also recommend that if you use this feature, you should combine it with <code>ssh-askpass</code>, so that any use of your SSH agent triggers a prompt on your computer, preventing usage of your agent without your knowledge. | ||