From: Andrei Gaponenko <Andrei.Gaponenko@cern.ch>
Date: Tue, 8 May 2001 23:49:34 +0200 (MET DST)
To: Renee Poutissou <renee@triumf.ca>
Cc: e614soft@relay.phys.ualberta.ca
Subject: Re: acess to e614db


Hi,

> When using the "ssh" method to access the cvs repository, 
> one should never use the commands "cvs login" or "cvs logout"
> any more. 
> You will be prompted for your password for each cvs command
> you execute. 

There is a method to avoid entering password each time.
It's an ssh feature which has nothing to do with specifically with cvs.
The following instructions assume you've never used RSA authentication,
otherwise your old files will be overwritten.

On a remote machine use the 

	ssh-keygen

command to generate RSA key pair.
You will be prompted for a file name (just leave the default value)
and a pass-phrase. Then, 

 scp ~/.ssh/identity.pub yourname@twist.triumf.ca:.ssh/authorized_keys

The setup is complete.

Then,
	ssh-agent tcsh     # (or any other shell)
	ssh-add

Enter the pass-phrase. Now from the child shell of ssh-agent you can use
cvs commands without entering password each time.
You can also log to e614db from this shell without password with
	ssh tw04.triumf.ca

It's a good idea to have a non-empty pass-phrase. 
Otherwise if someone gets an access to your private .ssh/identity
file he will be able to login under your name to e614db.

It's convenient to start your whole X-session as a child process 
of ssh-agent and do ssh-add from any window. 
How to set up this depends on your system.

Andrei


Re: acess to e614db / Andrei Gaponenko

Created for the The Center for Subatomic Research E614 Project Projects Page.
Created by The CoCoBoard.