From owner-freebsd-questions@FreeBSD.ORG Fri Apr 25 16:37:14 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4DA68106566B for ; Fri, 25 Apr 2008 16:37:14 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out3.apple.com (mail-out3.apple.com [17.254.13.22]) by mx1.freebsd.org (Postfix) with ESMTP id 1F40E8FC13 for ; Fri, 25 Apr 2008 16:37:14 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay11.apple.com (relay11.apple.com [17.128.113.48]) by mail-out3.apple.com (Postfix) with ESMTP id 2183629CBE09; Fri, 25 Apr 2008 09:37:14 -0700 (PDT) Received: from relay11.apple.com (unknown [127.0.0.1]) by relay11.apple.com (Symantec Mail Security) with ESMTP id 0D73F28082; Fri, 25 Apr 2008 09:37:14 -0700 (PDT) X-AuditID: 11807130-ad397bb000000ead-7f-481208b974a9 Received: from cswiger1.apple.com (cswiger1.apple.com [17.214.13.96]) by relay11.apple.com (Apple SCV relay) with ESMTP id E235E28043; Fri, 25 Apr 2008 09:37:13 -0700 (PDT) Message-Id: From: Chuck Swiger To: Anton Shterenlikht In-Reply-To: <20080425160939.GA9863@mech-aslap33.men.bris.ac.uk> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Date: Fri, 25 Apr 2008 09:37:13 -0700 References: <20080425160939.GA9863@mech-aslap33.men.bris.ac.uk> X-Mailer: Apple Mail (2.919.2) X-Brightmail-Tracker: AAAAAA== Cc: freebsd-questions@freebsd.org Subject: Re: ssh StrictHostKeyChecking=no refuse connection when key changed X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2008 16:37:14 -0000 On Apr 25, 2008, at 9:09 AM, Anton Shterenlikht wrote: > Is it normal that StrictHostKeyChecking=no in .ssh/config > still refuses ssh connection when host ID has changed. > > I've a setup in which host ids change frequently. How > can I setup ssh so that it ignores key change. You'd be better off fixing whatever it is that is making your host IDs change, but I suppose you could also try to create a zero-length known_hosts file, and keep it that way via: chflags uchg ~/.ssh/known_hosts You might also try to automate finding the current valid hostkeys via ssh-keyscan. -- -Chuck