Re: Hostkeys for Interfaces?

On Mon, 7 Feb 2005, Martin [iso-8859-1] Schr?der wrote:
> we have a central CVS server (cvs) which is accessed by ssh. Now
> if the CVS repository is moved to a different machine (e.g.
> because the original machine is broken) the new CVS server has a
> different hostkey (since it's a different machine), which causes
> all clients to update their key for "cvs", which is a lot of
> trouble.
>
> PHB suggests to use the same hostkey on all possible cvs servers. :-{
>
> One possible solution I can think of is use run a seperate sshd
> just for cvs with a hostkey shared between all cvs servers.
>
> But it would be even nicer if one could use a different hostkey
> for different interfaces, since the cvs server will always run
> on a special ip address. Is this possible now or is such a patch
> likely?

Frankly, I dont sure I understand the problem, so just several
ideas about it:

AFAIK hostkey couples with the name the client uses for ssh, e.g.,
`ssh 127.0.0.1' and `ssh localhost' introduces two different hostkeys.

I think it is quite reasonable that if several hosts make a cluster
(that is cleint should not be able to distinguish among them) then
they should share the hostkey (and hostname).

It is easy to run several sshd on different interfaces or ports by
using in sshd_config:

Port some-port
ListenAddress ip-of-the-interface

-- 
Regards,
ASK