Re: [gentoo-user] user config provisioning

["Stefan G. Weichinger" <lists@xunil.at>]

On 21.05.2015 10:49, Paul Tobias wrote:
> On 20 May 2015 22:08, "Stefan G. Weichinger" <lists@xunil.at> wrote:
>>
>> alias abcd-server='ssh -p 51023 174.183.26.11'  # demo only
> 
> Instead of aliases,  you can put this into ~/. ssh/config:
> Host abcd
>   Port 51023
>   Hostname 174.183.26.11
> 
> And then you can simply do this:
> ssh abcd
> 
> As a bonus, the host abcd will work with scp and rsync too. 

Yes, I knew of that.

I have to think what is better ... maybe really your suggested way of
doing it.

I just have to "convert" my aliases once ...

> You can
> check man ssh_config for some other options to use, for example the
> User is very useful too. Here are some more tricks:
> https://blog.flameeyes.eu/2011/01/mostly-unknown-openssh-tricks
> 
> There is a package net-misc/keychain which is useful to add your keys
> to the agent, and handles gpg keys too.

I have that on my systems, yes.

> Also note that most ssh servers allow only 3-5 authentication
> attempts, so if you have more than 2 keys in your agent, then
> connecting to a server with password authentication might fail.

ok, good to have that in mind, yes

> If you need to keep security boundaries but don't want to give up the
> convenience of ssh agent forwarding then you can use ssh-ident, as
> described here: http://rabexc.org/posts/pitfalls-of-ssh-agents
> (unfortunately no gentoo package for that one, but it's just a single
> python file).

thanks! nice hints ... I will take a closer look later when I fixed that
logjam-stuff on web and mailservers ....

nice day to you as well, Stefan