INTL 3:770/1 3:770/3   
   REPLYADDR cl@isbd.net   
   REPLYTO 3:770/3.0 UUCP   
   MSGID: 3f94ffdc   
   REPLY: d908c468   
   PID: SoupGate-Win32 v1.05   
   Scott Alfter wrote:   
   > In article <-FadnQKrpYU-sir4nZ2dnZfqnPGdnZ2d@earthlink.com>,   
   > 68g.1499 <68g.1499@etr6.net> wrote:   
   > > On install, you CAN select 'pi' as the username and anything   
   > > you want as the password. It WILL complain - but will do it   
   > > if you demand. If you change passwords later there's more of   
   > > a chance it will demand "minimum complexity" (that's deep in   
   > > the PAM stuff).   
   >   
   > For remote access (to a headless box or otherwise), you should be using   
   > key-based authentication anyway and should disable password authentication   
   > in sshd.   
   >   
   Why specifically?   
      
   One argument against using key based authentication (in my case   
   anyway) is that my home desktop and my laptop (which are the ssh   
   clients) are turned on and logged-into just about all the time. Thus,   
   with the default log-in key used for authentication, all my remote   
   systems would be accessible to someone just walking up to desktop or   
   laptop.   
      
   I *could* generate a separate key for every remote and force it to ask   
   for the key every time I log in but that adds extra hassle every time   
   I add or change a remote system.   
      
   Using the default (ssh password authentication) means that I have no   
   extra configuration required to either default or local system **and**   
   no on can casually walk up to desktop or laptop and get a login to a   
   remote.   
      
   Yes, a key is harder to crack than a password, but a reasonably   
   difficult to guess password is going to take far too long (in the real   
   world) to break.   
      
   --   
   Chris Green   
   Ā·   
      
   --- SoupGate-Win32 v1.05   
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)   
   SEEN-BY: 10/0 1 15/0 90/1 103/705 105/81 106/201 128/260 129/305 135/225   
   SEEN-BY: 153/757 7715 218/0 1 601 700 840 870 930 220/70 221/1 6 226/17   
   SEEN-BY: 226/30 100 227/114 229/110 112 113 200 206 307 317 400 426   
   SEEN-BY: 229/428 470 550 616 664 700 240/1120 266/512 267/800 282/1038   
   SEEN-BY: 291/111 292/854 301/1 113 812 310/31 320/219 322/757 335/364   
   SEEN-BY: 341/66 342/200 396/45 460/58 633/280 712/848 770/1 3 100   
   SEEN-BY: 770/330 340 772/210 220 230 5020/400 1042 5058/104 5075/35   
   PATH: 770/3 1 218/840 221/6 301/1 218/700 229/426   
      
|