SCIENTIFIC-LINUX-USERS Archives

August 2017

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: latest openssh update in SL7 breaks hostbased authentication?
From:
"Gilbert E. Detillieux" <[log in to unmask]>
Reply To:
Gilbert E. Detillieux
Date:
Fri, 25 Aug 2017 14:18:58 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (40 lines) 
On 25/08/2017 12:36 PM, Denice wrote:
> On Fri, 25 Aug 2017, Gilbert E. Detillieux wrote:
> 
>> I was relying on host-based authentication (using RSA keys) between 
>> hosts in a cluster, and since the latest update to openssh under SL7, 
>> that seems to no longer work.  These are the specific packages that 
>> were installed as part of the recent yum update:
>>
>> openssh-7.4p1-11.el7.x86_64.rpm
>> openssh-askpass-7.4p1-11.el7.x86_64.rpm
>> openssh-clients-7.4p1-11.el7.x86_64.rpm
>> openssh-server-7.4p1-11.el7.x86_64.rpm
>>
>> Any ideas why this stopped working?  Any ideas what I need to tweak to 
>> get it working again?
> 
> If this is about sshd using DNS to resolve hostnames then I already posted
> about this issue in the list:
> 
> https://listserv.fnal.gov/scripts/wa.exe?A2=ind1708&L=SCIENTIFIC-LINUX-DEVEL&F=&S=&X=1D29DF5D7C661A9346&Y=deatrich%40triumf.ca&P=11202 
> 
> 
> for example, if your ssh_known_hosts file uses hostnames instead of IP
> addresses then it might be the issue - probably worth giving it a quick
> test.
> 
> cheers, etc.
>    Denice

Yes, that was the issue.  I'm not on the SL-devel list, so I hadn't seen 
your earlier post.

Thanks for the tip!

-- 
Gilbert E. Detillieux		E-mail:	<[log in to unmask]>
Dept. of Computer Science	Web:	http://www.cs.umanitoba.ca/~gedetil/
University of Manitoba		Phone:	(204)474-8161
Winnipeg MB CANADA  R3T 2N2	Fax:	(204)474-7609

ATOM RSS1 RSS2