Re: ssh_host_keys

2008-12-10 Thread Chuck Anderson
On Wed, Dec 10, 2008 at 11:04:25PM +0100, Till Maas wrote: > On Wed December 10 2008, Mike McGrath wrote: > > http://fedoraproject.org/wiki/Infrastructure/SOP/ssh_known_hosts > > I suggest to use > > echo app1,10.8.34.59 $(cat /etc/ssh/ssh_host_rsa_key.pub) You may also want to include the FQDN

Re: ssh_host_keys

2008-12-10 Thread Till Maas
On Wed December 10 2008, Mike McGrath wrote: > On Wed, 10 Dec 2008, Mike McGrath wrote: > > I've not actually used global ssh_known_hosts before, I wouldn't be > > surprised if it causes issues in some of our scripts that might have a > > conflicting ~/.ssh/known_hosts. Lets keep our eyes open.

Re: ssh_host_keys

2008-12-10 Thread Mike McGrath
On Wed, 10 Dec 2008, Mike McGrath wrote: > We are now distributing an ssh_known_hosts file to all of our servers. > This means that you can blow away your ~/.ssh/known_hosts file. When > servers get rebuilt either replace it with the old ssh key, or update the > puppet/modules/ssh/files/ssh_known