default LDM to CheckHostIP=no

Vagrant Cascadian <[email protected]> Fri, 1 Apr 2011 12:17:47 -0700
Newsgroups gmane.linux.terminal-server.devel
Message-ID <[email protected]>
i've thought for some time we should consider defaulting to ignore the host ip 
address, to reduce the need to run ltsp-update-sshkeys whenever the ip address 
changes.

security-wise, i'm not sure what we gain by erroring out whenever the ip 
address changes- as long as we're connecting to a known hostname and host key 
pair, the connection should be mighty secure.

=== modified file 'src/plugins/ssh/ssh.c'
--- src/plugins/ssh/ssh.c       2010-11-08 20:41:35 +0000
+++ src/plugins/ssh/ssh.c       2011-04-01 17:05:15 +0000
@@ -415,6 +415,7 @@
     command = g_strjoin(" ", "ssh", "-Y", "-t", "-M",
             "-S", sshinfo->ctl_socket,
             "-o", "NumberOfPasswordPrompts=1",
+            "-o", "CheckHostIP=no",
             "-l", sshinfo->username,
             port ? port : "",
             sshinfo->sshoptions ? sshinfo->sshoptions : "",


alternately, could set it as default in the chroot's ssh_config options as part 
of ltsp-build-client.

thoughts?

live well,
  vagrant

------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_____________________________________________________________________
Ltsp-developer mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-developer
For additional LTSP help,   try #ltsp channel on irc.freenode.net