On Thu, Jul 08, 2010 at 02:59:07PM +0200, Krzysztof Paliga wrote:
> SSH seems to ignore clients /etc/ssh/ssh_known_hosts, where the  
> ltsp-update-sshkeys actually puts the keys... I had to copy it to  
> clients /root/.ssh/known_hosts...
Don't know why but it seems that ssh looks for both, the hostname and
the ip-address in /etc/ssh/ssh_known_hosts and
- if only a hostname entry exists issues the warning (see ldm's log on
  the client):
    Permanently added the RSA host key for IP address
    'XXX.XXX.XXX.XXX' to the list of known hosts.
- and if only an ip-address entry exists isssues the error
    The authenticity of host 'hostname (ip-address)' can't be
    established.
    key fingerprint is .................................. .
    Are:  you sure you want to continue connecting (yes/no)?
where ldm's expect wants to see "u...@server's password:"

After discovering this, I changed all "hostname ..." entries in
/etc/ssh/ssh_known_hosts to "hostname,ip-address ..." and now it
works.

So I think ltsp-update-sshkeys should always add an
"hostname,ip-address ..." entry if called with
   ltsp-update-sshkeys [-u] hostname
or
   ltsp-update-sshkeys [-u] ip-address

Horst

-- 
Horst Prote, FMI            __o   Systemadministration Abt. ALG und TI
Universitaet Stuttgart     `\<,       Tel: +49 711 7816-348, FAX: -310
Universitaetsstr. 38     ( )/( )            [email protected]
D-70569 Stuttgart        www.fmi.uni-stuttgart.de/fk/mitarbeiter/prote

------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:

Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to