use ssh -oStrictHostKeyChecking in euca_conf --discover-nodes
Bug #436210 reported by
Colin Watson
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
eucalyptus (Ubuntu) |
Fix Released
|
High
|
Dustin Kirkland |
Bug Description
euca_conf --discover-nodes prompts for manual acceptance of node host keys even when they were installed by the UEC installer. We probably ought to use 'ssh -oStrictHostKey
(I don't think we should turn off host key checking in the general case of node registration outside of the --discover-nodes fast path; it's not perfect to turn off host key checking in general, but it's definitely not good to turn it off when you might have to use password authentication.)
Changed in eucalyptus (Ubuntu): | |
status: | New → Confirmed |
importance: | Undecided → High |
To post a comment you must log in.
This should be relatively straightforward, to append an SCP_OPT= "-oStrictHostKe yChecking= no" if we're in --discover-nodes, and SCP_OPT="" otherwise.
:-Dustin