From 2513fc631c9a77836843f1c671cebb575bc76878 Mon Sep 17 00:00:00 2001 From: Jeffrey B Arnold Date: Sun, 30 Jul 2006 10:03:27 -0400 Subject: [PATCH] Import from TextPattern --- faq/43.mdwn | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 faq/43.mdwn diff --git a/faq/43.mdwn b/faq/43.mdwn new file mode 100644 index 0000000..0b7e58e --- /dev/null +++ b/faq/43.mdwn @@ -0,0 +1,17 @@ +[[!meta title="Why is ssh -k recommended for ssh-ing into scripts.mit.edu?"]] +Kerberos ticket forwarding (ssh -K [note the capital letter], the +default on Athena) will attempt to transfer your full Athena +credentials to scripts.mit.edu. The scripts server does not need +these credentials, and good security practice suggests that you +should not transfer your credentials where you do not need them. + +If you instead use ssh -k [note the lower case letter], you will +authenticate yourself to the scripts server using your kerberos +tickets, without giving the scripts server any special priveleges +over your Athena account. + +In short, **ssh -k scripts.mit.edu** is the recommended means of +ssh-ing to the scripts server. + + + -- 2.45.0