Print Page - ssh id files with ha clusters

Title: ssh id files with ha clusters
Post by: GaardenZwerch on July 29, 2020, 11:27:18 AM

Hi,

when building clusters, is it safe to use the same /conf/sshd files on all nodes?
I need to trigger commands via ssh on the active node and I get conflicts because of .known_hosts otherwise.
Is there another way of handling the situation that a given IP can present different keys to ssh?

Thanks,

Frank

Title: Re: ssh id files with ha clusters
Post by: franco on July 29, 2020, 01:15:42 PM

Hi Frank,

Individual keys are normal for devices that have separate IP addresses. But since you are accessing the same CARP IP I presume you can safely copy the keys from one machine to the next manually.

We don't want to handle key merge / replacement in case it differs from user expectation and since keys were never included in config.xml it's hard to recover them if we automate it.

Cheers,
Franco

Title: Re: ssh id files with ha clusters
Post by: GaardenZwerch on July 29, 2020, 02:05:12 PM

Thanks!

OPNsense Forum

English Forums => General Discussion => Topic started by: GaardenZwerch on July 29, 2020, 11:27:18 AM