Re: [9fans] how do you usually deal with new users and secstore?

[Eric Grosse <ehg@lucent.com>]

> such a huge password would be impossible to use in our environment,

Yes, such considerations are the reason this is not the default.
I hope someday we can get factotum integrated well enough into
Linux and Windows that you won't feel that way.

> logging in with drawterm can't be expected to remember an 80-character

I thought drawterm's time had passed and people were migrating
to VNC or VMware.  If not, then its security should certainly
be improved (as has been recently discussed).  One item could be
borrowing the code from factotum for getting keys.   By the way,
it's not an 80 character password---just enough randomness for
your environment, packed base64.  60 bits = 10 bytes might be enough.

> on a different topic -- what is the syntax for an rsa key?

It is what you get out of:
    auth/rsagen > ssh.secret.factotum
and should be added to your secstore factotum file.  You then
    auth/rsa2ssh ssh.secret.factotum > ssh.public
and "cat ssh.public >> .ssh/authorized_keys" on your Unix server.
I feel comfortable using the same ssh.public on remote university
accounts, but wouldn't want to use a single password everywhere.

Eric