Changes between Version 3 and Version 4 of Pantasks_FAQ

Timestamp:

May 14, 2009, 1:58:00 AM (17 years ago)

Author:

Sebastian Jester

Comment:

Add passwordless ssh instructions

Pantasks_FAQ

@@ -97 +97 @@
  * First, check that you can ssh from the machine on which you are running pantasks to the node without being prompted for a password and without errors reading your shell startup file (.bashrc, .cshrc, .profile, .login and the like):
   * Try "ssh myhost"
-  * If you're prompted for a password, then you need to set up ssh keys, and/or check your ssh configuration.
+    If you're prompted for a password, then you need to set up ssh keys, and/or check your ssh configuration. Setting up the keys for passwordless login works like this:
+{{{
+# Generate an ssh key pair (private key, identifies you; public key, to be shared with others) 
+# with an empty passphrase (to enable passwordless login)
+ssh-keygen
+# Now press <enter> twice (empty passphrase & to confirm)
+
+# Add public key to "authorized keys" listing public keys of people
+# who can connect if they possess the corresponding private key
+cat ~/.ssh/id_rsa.pub >> authorized_keys
+# You should now be able to 
+ssh localhost
+# without having to enter a password.
+
+# Copy the ~/.ssh/authorized_keys to any other remote machine that you
+# want to use in pantasks (or log in to without having to type your password
+# in general).
+
+# WARNING: anyone who has access to your ~/.ssh/id_rsa file now has access to the 
+# machines that have your id_rsa.pub in authorized_keys. I.e. treat ~/.ssh/id_rsa 
+# carefully and don't let anybody copy it.
+
+# To test that this works for pantasks, say
+ssh localhost pclient
+# If you don't get a pclient shell prompt, something is wrong.
+# If you do, just type 'exit' to get back to where you were
+}}}
+
  * Second, check that you can start up 'pclient' over an ssh connection. For that to work, you need to run 'psconfig ipp-2.6.1' (or whatever the IPP version is called on your system) in your startup file. 
   * Try "ssh myhost pclient". If it works, you can exit pclient with "exit" or "quit".