Re: Question on SSH configuration in a cluster environment.
From: Jeremiah DeWitt Weiner (jdw_at_panix.com)
Date: 01/16/04
- Previous message: Doug O'Leary: "Re: Question on SSH configuration in a cluster environment."
- In reply to: Snoopy_: "Question on SSH configuration in a cluster environment."
- Next in thread: Kyler Laird: "Re: Question on SSH configuration in a cluster environment."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 16 Jan 2004 16:56:41 +0000 (UTC)
In comp.security.unix Snoopy_ <snoopy_@excite.com> wrote:
> Issue: When a failover happens in a cluster, users can no longer
> connect via ssh because of the changed host key. I believe users are
> connecting to the logical/virtual cluster hostname, yet the
> known_hosts file is picking up the public key from the physical host.
Yeah, this is sort of a known problem. However, there's a good
workaround: add the cluster hostname to the known_hosts file on each line
which has a cluster member. So, for example, if your known_hosts looked
like
foo.example.com 1024 123456789...
bar.example.com 1024 987654321...
just change it to look like
foo.example.com,cluster.example.com 1024 123456789...
bar.example.com,cluster.example.com 1024 987654321...
My ISP has a similar issue: if you look up "shell.panix.com"
you'll see it resolves to three different IPs, so the host key is liable
to keep changing on you if you use the cluster name. Here's their page
on dealing with it -
http://www.panix.com/help/ssh.html
- which should have some stuff applicable to your situation.
JDW
- Previous message: Doug O'Leary: "Re: Question on SSH configuration in a cluster environment."
- In reply to: Snoopy_: "Question on SSH configuration in a cluster environment."
- Next in thread: Kyler Laird: "Re: Question on SSH configuration in a cluster environment."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
