SCIENTIFIC-LINUX-USERS Archives

August 2017

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: latest openssh update in SL7 breaks hostbased authentication?
From:
Denice <[log in to unmask]>
Reply To:
Denice <[log in to unmask]>
Date:
Fri, 25 Aug 2017 10:36:49 -0700
Content-Type:
text/plain
Parts/Attachments:
text/plain (32 lines) 
On Fri, 25 Aug 2017, Gilbert E. Detillieux wrote:

> I was relying on host-based authentication (using RSA keys) between hosts in 
> a cluster, and since the latest update to openssh under SL7, that seems to no 
> longer work.  These are the specific packages that were installed as part of 
> the recent yum update:
>
> openssh-7.4p1-11.el7.x86_64.rpm
> openssh-askpass-7.4p1-11.el7.x86_64.rpm
> openssh-clients-7.4p1-11.el7.x86_64.rpm
> openssh-server-7.4p1-11.el7.x86_64.rpm
>
> Any ideas why this stopped working?  Any ideas what I need to tweak to get it 
> working again?

If this is about sshd using DNS to resolve hostnames then I already posted
about this issue in the list:

https://listserv.fnal.gov/scripts/wa.exe?A2=ind1708&L=SCIENTIFIC-LINUX-DEVEL&F=&S=&X=1D29DF5D7C661A9346&Y=deatrich%40triumf.ca&P=11202

for example, if your ssh_known_hosts file uses hostnames instead of IP
addresses then it might be the issue - probably worth giving it a quick
test.

cheers, etc.
   Denice
-- 
deatrich @ triumf.ca, Science/ATLAS         PH: +1 604-222-7665
<*> This moment's fortune cookie:
They are relatively good but absolutely terrible.
 		-- Alan Kay, commenting on Apollos

ATOM RSS1 RSS2