ssh private keys [SOLVED]

[pmatos]

Hello all,

I assume that each user should only have a key pair, instead generating a new pair for each PC they have. So, the question now is, where should you have the private key? Should you keep a copy in each of your PCs? You probably need to in order to do passwordless ssh, right?

Cheers,

Paulo Matos

[krinn]

in ~/.ssh as simple as that

[pmatos]

[timeBandit]

Yes. If users sign in to one host from multiple clients, each user has only one public key--stored at the host--and they'll need the same matching private key on each client.

When one user connects to multiple hosts, it's a matter of preference. Using a single key pair and authorizing the public key on each host is easier for the user: one private key unlocks access to all hosts. That's also a vulnerability: compromising one key compromises all hosts. It's more secure to require a separate key pair for each host, but that's harder on the user, who must use the correct private key to connect to each host.
_________________
Plants are pithy, brooks tend to babble--I'm content to lie between them.
Super-short f.g.o checklist: Search first, strip comments, mark solved, help others.

[pmatos]

ok thanks!