Using SSH as "su"-substitute
Ph. Marek
marek at bmlv.gv.at
Wed Jun 26 16:58:12 EST 2002
On Wednesday 26 June 2002 08:35, orlando wrote:
> Wouldn't
> ssh root@<ip_addr> "command as root"
>
> accomplish this?
Yes, it would. But at the overhead of a ssh process, a new chain of sshd and
subprocesses, losing all environment, and encryption/decryption of all data
via loopback.
That's why I suggest doing a ssh-su which avoid all these and just uses ssh
keys or the agent to verify the authorization.
Regards,
Phil
More information about the openssh-unix-dev
mailing list