RE: keying a fresh sshd

It's asking because it is adding the connection to your known hosts
file. I guess your are changing the name of the computer upon reload...
Does it prompt every time for this or only the first time? There is a
suppression that can occur in the sshd_config file. Should be something
like UserKnownHosts	NO or something close to that. 

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Carl
Karsten
Sent: Thursday, October 12, 2006 5:08 PM
To: [email protected]
Subject: Re: keying a fresh sshd

>>>
>>> I am re-running the OS install each time - like booting from the CD 
>>> and doing 'install to first HD, auto partition and mkfs hda1'
>>>
>>> So there are no "old keys" to overwrite.
>>
>> Okay, when you said install I was thinking it was the aplication you 
>> were installing. Okay, in this case you have no options other than 
>> restoring an old /etc/ssh/ (assuming that is where you put it) over 
>> the new one after the OS install is complete.
>>
> 
> cool.  This was my suspicion, but my first attempt failed so just 
> getting confirmation that it is what I need to do is a big help.
> 
> I just copied the whole dir to another box.  I'll reinstall and diff 
> the new dir to the old and post the results (not that anyone here 
> asked for them, but may as well for posterity.)
> 

carl@cware1:~$ diff -q a/ssh/ b/ssh/
Files a/ssh/ssh_host_dsa_key and b/ssh/ssh_host_dsa_key differ Files
a/ssh/ssh_host_dsa_key.pub and b/ssh/ssh_host_dsa_key.pub differ Files
a/ssh/ssh_host_rsa_key and b/ssh/ssh_host_rsa_key differ Files
a/ssh/ssh_host_rsa_key.pub and b/ssh/ssh_host_rsa_key.pub differ

moved the old files onto the new install, and bingo:

carl@amd15:~$ ssh juser@yate2
Warning: the RSA host key for 'yate2' differs from the key for the IP
address '192.168.1.18'
Offending key for IP in /home/carl/.ssh/known_hosts:27 Matching host key
in /home/carl/.ssh/known_hosts:29 Are you sure you want to continue
connecting (yes/no)? yes juser@yate2's password:

'good'

not sure why the warning, but it lets me log in.  I don't mind answering
a quick question, it was the "edit a file" process that was driving me
nuts.

Carl K

--
List Info:      http://erdelynet.com/ssh-l/
List Archives:  http://erdelynet.com/archive/ssh-l/
To Unsubscribe: Mail mailto:[email protected]




--
List Info:      http://erdelynet.com/ssh-l/
List Archives:  http://erdelynet.com/archive/ssh-l/
To Unsubscribe: Mail mailto:[email protected]