Re: Supressing ssh yes/no message

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 10/03/03 

Date: Fri, 03 Oct 2003 15:25:41 GMT

In article <3f7de31f.14818798@news.iskon.hr>, mr. x <mrx@nospam.com> wrote:
>I have a shell script that connects to a pool of servers which change
>ip addresses often,so i encounter the typical msg:
>
>----------
>The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
>RSA key fingerprint is xxxxxx
>Are you sure you want to continue connecting (yes/no)

$ man ssh_config
[snip]
CheckHostIP
     If this flag is set to ``yes'', ssh will additionally check the
     host IP address in the known_hosts file. This allows ssh to
     detect if a host key changed due to DNS spoofing. If the option
     is set to ``no'', the check will not be executed. The default is
     ``yes''. 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • Is my ssh session encrypted?
    ... Ssh to to another computer produces an error that "The authenticity ... What does the the sign-on message "authentiticity can't be ... The authenticity of host 'slak100 ' can't be ... RSA key fingerprint is ...
    (comp.security.ssh)
  • ssh
    ... The authenticity of host '10.10.10.27' can't be established. ... Key fingerprint is 1024 ... Are you sure you want to continue connecting? ...
    (comp.security.ssh)
  • Re: PuTTY failing "Servers host key did not match the signature supplied" suddenly
    ... Are you sure you want to continue connecting? ... The authenticity of host 'localhost ' can't be established. ... that the problem lies with openssh server then. ...
    (comp.security.ssh)
  • How to capture ssh authenticity changes in bash?
    ... The authenticity of host 'ssh-server.example.com ' can't be ... I've tried redirecting it to a log file but the redirection doesn't ... I'm able to redirect the stderror to ...
    (comp.unix.solaris)
  • Re: scp over several hops
    ... >but one host in the chain, ... Then that would be just like a local port forward but with the traffic ... Good judgement comes with experience. ...
    (comp.security.ssh)