HostbasedAuthentication problem

Markus Friedl markus at openbsd.org
Tue Oct 30 02:27:05 EST 2001


On Mon, Oct 29, 2001 at 12:55:04PM +0100, Dost, Alexander wrote:
> Ok. That did it. There was a problem with short/long names. As we use DNS,
> the names are resolved to long names, and ssh-keyscan delivered only short
> names. Changing the ssh_known_hosts-entries to long names made it work.
> Thanks a lot

ssh-keyscan does not deliver names at all.

i used something like this:

ypcat hosts | \
        tr -s ' ' ',' | \
        sed 's/,$//' | \
        sort -u | \
        ssh-keyscan -T 50 -f -

e.g you can do

echo hosta,hosta.longname,1.2.3.4 | ssh-keyscan -f -



More information about the openssh-unix-dev mailing list