On Sat, Sep 06, 2003 at 12:23:09AM -0500, Brian Elliott Finley wrote:
> I'm thinking it would be appropriate to add a bit to the end of the
> autoinstall script that would re-gen the newly installed box's ssh keys,
> unless the image was collected with the --replicant option.
> 
> To be explicit, I'm referring to the host's keys, that are typically
> found in ssh's etc directory, such as:
> 
>     /etc/ssh/ssh_host_dsa_key
>     /etc/ssh/ssh_host_dsa_key.pub
>     /etc/ssh/ssh_host_rsa_key
>     /etc/ssh/ssh_host_rsa_key.pub
> 
> Comments before I code?
> 

imo, it should be a separate option (not tied to "replicant").
some users rely on the same key on every box (regardless of their
ip-assignment method) - otherwise, they'll get the pesky
man-in-the-middle-attack message, and have to remove entries
form known_hosts each time they login to a newly installed box.

also imo, the right place for this code is in systemconfigurator - 
would the sc guys except such a patch?


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Sisuite-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/sisuite-devel

Reply via email to