This will not affect devops things, however it will bind your MacOS local user identity with the smart card credential, so when the PIV is in the reader, you will have to enter the PIN to complete authentication. Provide just one of the public keys with your email address appended at the end of the string preceding it with a space and send it via Slack or Gmail to our DevOps team so they can update the ssh authorizedkeys. I deleted all lines in /.ssh/authorizedkeys and the /. You will get multiple public keys as output. If you plug your PIV into your mac and see a dialog that looks like this, do not pair it. Ive just searched around and couldnt find any solution so heres my problem: On my OSX 10.7.4 Im trying to set up a passwordless localhost ssh by ssh-keygen -t dsa -P -f /.ssh/iddsa & cat /.ssh/iddsa.pub > /.ssh/authorizedkeys but ssh localhost keeps asking for the password. If it is lost/stolen, be sure to follow the procedures here: MacOS SmartCard Pairing Remember that your PIV card is a critical security device. If you see the reader blinking (mine blinks when you are doing auth, yours may be different) while you aren’t doing ssh stuff, it might be such an attack taking place. Also: consider keeping your card reader visible so that you can see when it’s being used. Otherwise somebody who has compromised the machine might be able to try a lot of PINs (or sniff yours from the keyboard when you auth) and be able to use it while we are not around. We should all strive to remove our PIV cards from the readers when we aren’t around. MptwfZOnBMZzCwCL6ttuT63M5G5Kz+N card discipline Ssh-rsa AAAAB3NzaC1yc2XBSHSHDAQABAAABAQC6RmDp+9wABDS3yfurkjLpcbdWDxG9SnL4424mg+0czzPDX3hNLs0ON9rPQg0hUTi1VeX3jXgf7vxRQ9RizħkXxv9mhU+dxC0ywo13lZgie1lPnx圜OOKmouN0Qkep4bxFTP3s5VSVyOpLGzJr7alpK3h5wUzbIt4bFpnjP0mmuHGmInOlC+yzLbm568kts0sVlii
0 kommentar(er)
