About multiple hosts with same hostname
Christian Iversen
chrivers at iversen-net.dk
Tue Mar 31 23:33:45 EST 2009
Hello all
I have a somewhat annoying problem with OpenSSH. Now, granted, it's
certainly not a bug. I'm just wondering what the best course of action is.
At work, we have multiple customers with machines named "fw0", "fs0",
etc. This is all good, since it conforms to a standard naming scheme, so
it's easier to administrate.
However, when we go to our customers' sites, we often issue commands
like "ssh user at fw0", which of course gives out endless warnings about
MITM attacks, and essentially makes host keys worthless on the internal
customer networks.
It seems somewhat wrong to me. Isn't there some way to make OpenSSH save
the host key using the FQDN instead of just the local part? That would
solve this problem. Is there some other commonly accepted way of dealing
with this that doesn't involve making all our host names unique?
Bonus question: We have 2 storage servers (let's call them storage0 and
storage1), and between them they run a floating IP address with a
heartbeat-monitored NFS daemon (let's call that nfs0).
Now, obviously the host key changes whenever there's been a failover,
and so again we get this same kind of problem. What to do in this case?
Any ideas?
Thank you all for your time.
--
Med venlig hilsen
Christian Iversen
More information about the openssh-unix-dev
mailing list