Using SSH as "su"-substitute

Ph. Marek marek at bmlv.gv.at
Wed Jun 26 16:58:12 EST 2002


On Wednesday 26 June 2002 08:35, orlando wrote:
> Wouldn't
> ssh root@<ip_addr> "command as root"
>
> accomplish this?
Yes, it would. But at the overhead of a ssh process, a new chain of sshd and 
subprocesses, losing all environment, and encryption/decryption of all data 
via loopback.

That's why I suggest doing a ssh-su which avoid all these and just uses ssh 
keys or the agent to verify the authorization.


Regards,

Phil




More information about the openssh-unix-dev mailing list