Fwd: KnownHostsCommand /usr/bin/sss_ssh_knownhosts %H breaks if host entry in ~/ssh/config exists specifying the IP

Han Boetes hboetes at gmail.com
Tue Oct 22 20:09:05 AEDT 2024


This command fails

%  ssh tarzan
KnownHostsCommand-ORDER /usr/bin/sss_ssh_knownhosts 10.10.11.14 failed,
status 1
KnownHostsCommand failed

If there is an IP entry in ~/.ssh/config

Host tarzan
  hostname 10.10.11.14


So I created a wrapper:

%  cat /usr/bin/sss_ssh_knownhosts.wrapper
#!/bin/sh
/usr/bin/sss_ssh_knownhosts "$@" || true

Which works around the problem and does make ssh check ~/ssh/knownhosts
again.

I don't know what is wisdom here. Is this an oversight, is there a more
elegant solution?

Best regards
Han


More information about the openssh-unix-dev mailing list