On Mon, Jul 5, 2010 at 11:16 PM, Randy Bush <span dir="ltr"><<a href="mailto:randy@psg.com">randy@psg.com</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
[ moved to list ]<br>
<div class="im"><br>
>> should we build an authorized_keys on the ripe bastion host that has all<br>
>> our public keys?<br>
> Not sure how long it'll be useful there, but then, we can drop them there<br>
> and move them around as needed.<br>
<br>
</div>is the ripe bastion host ours to modify?<br></blockquote><div><br></div><div>Not sure. The ietf78 user should be ours. </div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
if so, i will add my key to ~/.ssh/authorized_keys and others should<br>
too.<br></blockquote><div><br></div><div>Should be fine.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">will we know when the bastion host is about to disappear, so we can copy<br>
the then current file off?<br></blockquote><div><br></div><div>I'd recommend copying it to management as well, but I'd hope ripe would give us fair warning.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<font color="#888888">randy<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Chris Elliott<br><a href="mailto:chelliot@pobox.com">chelliot@pobox.com</a><br><br>