On Mon, Aug 07, 2000 at 10:34:58AM -0400, Igor Schein wrote:
On Thu, Aug 03, 2000 at 05:53:27PM -0400, John Stoffel wrote:
Igor> It sure would, because it would allow a batch connection without Igor> having to type in a password from, very helpful for backup Igor> purposes. Of course it wouldn't be that important if ONTAP Igor> supported crontab ( a tiny hint here ).
cron + Expect on the Unix host would do the trick here too.
it would still require the cleartext password to be kep somewhere, which is against my religion. Nothing beats authorized_hosts setup as far as security and convenience.
authorized_keys is also a clear-text password (for scripting you need to store the key without a passphrase or you need to store the passphrase), it is just not transmitted over the net in clear. The protection only helps against network sniffers but not against someone getting access to the scripts.