Re: backup procedure

It will work just fine.  There is nothing the locks a configuration or key
pair  to a specific host.


On Tue, 21 Dec 2004 17:43:50 -0800 (PST), Alvin Oga
<alvin.sec@virtual.linux-consulting.com> wrote:
> hi ya
>
> > Can I move the /etc/ssh/* files to the new server? The new machine will
> > have the same configuration and the same server name on the DNS but it's
> > own actual hostname (we'll do some dns link magic behind the scene)
>
> if ssh is done properly ... they will know the server has changed
>
>         - if you want to hide the fact that the server has changed,
>         than, you'd basically break one of the "secure features" of ssh
>         that you, as the user, know that the next time you connect
>         to www.foo.com, that its not what you're expecting
>
> if you move  old:/etc/ssh/* files to new:/etc/ssh files
>         than the "new" machine will and can pretend to be just
>         like the "old" machine and other machines might not
>         know that "new" has hijacked the "old" machine
>
>         - but i claim, that "new" host should NOT even be able
>         to use the old ssh host files
>
> - try it and see what happens ..
>
> c ya
> alvin


-- 
END OF LINE
       -MCP