Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Re: avoiding 'authenticity' prompt

Subject: Re: avoiding 'authenticity' prompt
Date: Wed, 10 Nov 2004 17:07:21 +0100
Hi David,

You can use a mix of the -o parameter in the command line to use
options in the format of the ssh_config file and the setting
StrictHostKeyChecking, info in the man page states:

 StrictHostKeyChecking
             If this flag is set to ``yes'', ssh will never automatically add
             host keys to the $HOME/.ssh/known_hosts file, and refuses to con-
             nect to hosts whose host key has changed.  This provides maximum
             protection against trojan horse attacks, however, can be annoying
             when the /etc/ssh/ssh_known_hosts file is poorly maintained, or
             connections to new hosts are frequently made.  This option forces
             the user to manually add all new hosts.  If this flag is set to
             ``no'', ssh will automatically add new host keys to the user
             known hosts files.  If this flag is set to ``ask'', new host keys
             will be added to the user known host files only after the user
             has confirmed that is what they really want to do, and ssh will
             refuse to connect to hosts whose host key has changed.  The host
             keys of known hosts will be verified automatically in all cases.
             The argument must be ``yes'', ``no'' or ``ask''.  The default is
             ``ask''.

HTH,

Nathan

On Tue, 9 Nov 2004 23:15:19 -0500, David T-G
<davidtg-openssh@justpickone.org> wrote:
Hi, all --

We use ssh as part of our batch scripts and occasionally come across a
machine we haven't visited before and get hung up.

Within this network we can trust and believe all machines, so I would
like to set a flag that causes the new host key, whatever it may be, to
be added to the known_hosts file and we move on.

Can this be accomplished without taking apart the program and modifying
the source code?

TIA & HAND

:-D
--
David T-G
davidtg@justpickone.org
http://justpickone.org/davidtg/      Shpx gur Pbzzhavpngvbaf Qrprapl Npg!




<Prev in Thread] Current Thread [Next in Thread>