automating commands on nodes

[Robert G. Brown]

On Tue, 6 Jun 2000, Greg Lindahl wrote:

> > Although I'll admit I haven't done this, it should be possible to
> > configure ssh such that outside connections to the head node are
> > encrypted, but connections within the cluster are unencrypted
> 
> This is a pain. You have to recompile sshd to allow unencrypted connections.
> Then there is no existing policy option to enforce external connections
> being encrypted. Gaah.

And the marginal gain in performance is very small unless you are
regularly using ssh to send large files.  Most of the cost is in the
original RSA connection, not the encryption.

   rgb

Robert G. Brown	                       http://www.phy.duke.edu/~rgb/
Duke University Dept. of Physics, Box 90305
Durham, N.C. 27708-0305
Phone: 1-919-660-2567  Fax: 919-660-2525     email:rgb at phy.duke.edu