Re: [9fans] how do you usually deal with new users and secstore?

[mirtchov@cpsc.ucalgary.ca]

> I create a secstore account immediately for new users and set
> their p9sk1 password to a string with, say, 80 bits of entropy
> so brute-force attack on sniffed challenge/response packets is
> infeasible.  When creating the initial secstore factotum file,
> I encourage the new user to install an RSA key as well, for
> ssh to remote systems without having to type any more passwords.

such a huge password would be impossible to use in our environment,
where we don't have any other means of proving who a user is -- people
logging in with drawterm can't be expected to remember an 80-character
string, especially a random one...

am I missing something?  i can't see how one can get access to
secstore without first having done a p9sk1 authentication..

on a different topic -- what is the syntax for an rsa key?  i'm
currently using a secstore entry (on a per-user, per-machine basis)
for remote ssh connections similar to:

	key proto=pass server=some.machone service=ssh user=andrey ...

andrey