SSH known hosts Infrastructure SOP: Difference between revisions

Latest revision as of 19:06, 20 July 2015

Shortcut: ISOP:KNOWNHOSTS

This SOP has moved to the fedora Infrastructure SOP git repo. Please see the current document at: http://infrastructure.fedoraproject.org/infra/docs/sshknownhosts.rst For changes, questions or comments, please contact anyone in the Fedora Infrastructure team.

@@ Line 1: / Line 1: @@
-= ssh_host_keys - SOP =
+{{header|infra}}
+{{shortcut|ISOP:KNOWNHOSTS}}
-== Contact Information ==
-Owner: Fedora Infrastructure Team
-Contact: #fedora-admin, sysadmin group
+This SOP has moved to the fedora Infrastructure SOP git repo. Please see the current document at: http://infrastructure.fedoraproject.org/infra/docs/sshknownhosts.rst
+For changes, questions or comments, please contact anyone in the Fedora Infrastructure team.
-Location: all
-Servers: all
+[[Category:Infrastructure SOPs]]
-Purpose: Provides Known Hosts file that is globally deployed.
-== Replacing Key ==
-If you install a new server or change a host key.  use ssh-keyscan.  Remember to include both the short hostname *AND* the ip address.
-<pre>
-[mmcgrath@puppet1 .ssh]$ ssh-keyscan -t rsa app1,10.8.34.59
-# app1 SSH-2.0-OpenSSH_4.3
-app1,10.8.34.59 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtabx7H5RFxs/O2WPd0Hh9V302mKPXEF1N+FifLZj3WIbm757Lh6sUZpzBAQqi+MaOtXnFFs6TDemblPRNPNTcXBNtlVM/EBd80axN69qHHxvUBuozE5Rzpo1oSFwVzL/Y0lAsyzC81xEftXo+S/at+vGXpntnt5p/LtmpqVr/7kxjRZLhOqtxiPg0M0mmCu68DVMxWhlYjQDGyVNW1GrzaqBUWx3AdbJQsJpFK/bmybDD2bxnjWXJdtgelZaanpoauPlbad5ORsXZSNHSxzcS0INFJC2xxrXpvT8H84T11659pQUAkic3S4LmscjeVc5m7XEFNIhwAUJVq9uhdtYAQ==
-</pre>
-Copy the non-commented line and place it in the puppet repo under:
-<pre>
-puppet/modules/ssh/files/ssh_known_hosts
-</pre>
-Please put them in alphabetical order.