From: Jeffrey B Arnold <jbarnold@mit.edu>
Date: Sun, 30 Jul 2006 14:03:27 +0000 (-0400)
Subject: Import from TextPattern
X-Git-Url: https://scripts.mit.edu/gitweb/www/raw.git/commitdiff_plain/2513fc631c9a77836843f1c671cebb575bc76878

Import from TextPattern
---

diff --git a/faq/43.mdwn b/faq/43.mdwn
new file mode 100644
index 0000000..0b7e58e
--- /dev/null
+++ b/faq/43.mdwn
@@ -0,0 +1,17 @@
+[[!meta title="Why is ssh -k recommended for ssh-ing into scripts.mit.edu?"]]
+Kerberos ticket forwarding (ssh -K [note the capital letter], the
+default on Athena) will attempt to transfer your full Athena
+credentials to scripts.mit.edu. The scripts server does not need
+these credentials, and good security practice suggests that you
+should not transfer your credentials where you do not need them.
+
+If you instead use ssh -k [note the lower case letter], you will
+authenticate yourself to the scripts server using your kerberos
+tickets, without giving the scripts server any special priveleges
+over your Athena account.
+
+In short, **ssh -k scripts.mit.edu** is the recommended means of
+ssh-ing to the scripts server.
+
+
+