Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I've created one password-protected RSA key to access my remote server via ssh using key-based authentication and added it to seahorse using ssh-add.

I would like to prevent seahorse from asking me for the passphrase on every login.

Is there any way to disable this? Or to enter it forever? Or to have one one user given trusted access forever?

share|improve this question

2 Answers 2

Launch Seahorse, find your "login" encryption key, then right click on "Passwords: Login" and choose "Change Password".

Seahorse

Enter the old password, then hit the "Okay" button, leaving the new and confirm boxes empty. You will be prompted about "Unsafe Storage". Confirm this, and your keyring will be automatically unlocked when you log into your machine.

Note that this really is "Unsafe" and should only be used if you encrypt your home drive, as otherwise losing your laptop will equate to opening up everything it has access to - that might include your Gmail password (if you use a Gmail checker) your WIFI passwords if you connect to WIFI, IM passwords and so on. Looks like Chromium has started using it for storage too, as I seem to have a lot of site-specific stuff recorded in my keyring.

Personally I also uninstall Seahorse after setting everything up too, so that it's a little less trivial to see all my passwords in cleartext should I forget to lock my laptop!

Be careful with unsafe storage.

share|improve this answer
    
This doesn't work. The ssh key isn't a password, it isn't in first tab, it has in second tab: "My personal keys". –  Simón Mar 31 '11 at 9:50
    
Hi Simón, see this article to see if it helps (probably too late) : techblog.zabuchy.net/2010/simple-password-less-ssh-login. –  Scaine Jun 24 '11 at 13:53

Any solution that would stop Seahorse from asking for the passphrase would involve writing the passphrase down to the hard drive (or something else). Which means anyone who steals your computer would be able to log in (as the password is also saved somewhere). This is pretty much the same as not having a passphrase in the first place.

In short, just remove the passphrase. The point of the passphrase is that if someone gains access to your machine and steals the key, you have some time (before they bruteforce the passphrase) to invalidate the key on any machines you use it on. Removing the passphrase doesn't make the key itself less secure.

share|improve this answer
    
Yes, I know. But I think that it would be a nice feature that allows to add one trusted user in the same computer that it's installed the key (writing the passphrase once in trust moment). And this trusted user could use the ssh key without passphrase. In fact, there is a parameter I do not understand then what it does: (img263.imageshack.us/img263/8673/captura20110331115429.png) –  Simón Mar 31 '11 at 9:56

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.