Partially Solved! Re:Multiple ssh keys in known_hosts possible?

Kihara Muriithi william.muriithi-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Fri Jul 13 05:33:30 UTC 2007


Hi pals,

I have come across this problem also, and I ended up giving up. As
Sorensen just mentioned, the application is designed to avoid
insecurity due to this situation.

I came across the problem when trying to back up Cisco PIX
configurations. The script logs in through ssh and push the recent
configuration somewhere else. This works until the backup takeover.
Since both primary and backup share the same IP, ssh log in fails as
the Primary PIX key is  different from the backup key. After reaching
the end of the rope on finding a solution, I gave up using ssh,
enabled telnet on pix and that is what is in use for backup. Not a
secure solution, but working at least.

I would be happy is someone here have a solution for this problem. I
don't know if Kelly solution would help, but I will look at it.
Anyway, a solution that don't use port would be more ideal

Regards
William

On 12/07/07, Madison Kelly <linux-5ZoueyuiTZhBDgjK7y7TUQ at public.gmane.org> wrote:
> Madison Kelly wrote:
> > host machine1
> > hostname 111.222.33.44
> > hostkeyalias machine1
> > port 2244
> >
> > host machine2
> > hostname 111.222.33.45
> > hostkeyalias machine2
> > port 2245
>
> Bah, mistake. that should read:
>
> host machine1
> hostname 111.222.33.44
> hostkeyalias machine1
> port 2244
>
> host machine2
> hostname 111.222.33.44
> hostkeyalias machine2
> port 2245
>
> The hostname, obviously, needs to be the same.
>
> Madi, who obviously isn't awake yet.
> --
> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list