topic Re: Issues with SSH - Public key authentication method on a Serviceguard cluster in Operating System - HP-UX

Issues with SSH - Public key authentication method on a Serviceguard cluster

kaushikbr — Thu, 03 May 2007 05:54:52 GMT

Hi,

We are trying to use SSH Public key based authentication on a Serviceguard cluster ( 2 node cluster ).
We are running HP-UX B11.23 ( on Itaniums ) and upgraded ssh to A.04.30.015.

We are trying to configure the Serviceguarded cluster as the ssh server for scp mainly.

We have configured the ssh 2 protocol & using the RSA keys on serviceguard cluster. We have configured the RSA keys on both members of the cluster.

The problem we are facing at the moment;
When we try to do a SCP on the serviceguard packages, ssh detects the scp call as a intrusion and does not accept the connection.

We have a requirement that we do the SCP to the serviceguard package.
Is there a way around this or is there a known method of doing this.

Thank you all in advance for your advice and suggestion.

Regards
Kaushik

Re: Issues with SSH - Public key authentication method on a Serviceguard cluster

Ivan Krastev — Thu, 03 May 2007 06:17:19 GMT

Try to share one host key for all servers - see this thread : http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=952189

regards,
ivan

Re: Issues with SSH - Public key authentication method on a Serviceguard cluster

Steven E. Protter — Thu, 03 May 2007 06:45:44 GMT

The floating ip address moves from machine to machine. ssh to preven intrusion and such checks the mac address and can detect when the system that owns the floating ip address has been changed.

Therefore the shared key is the only way to go to prevent his (see previous post).

SEP

Re: Issues with SSH - Public key authentication method on a Serviceguard cluster

kaushikbr — Thu, 03 May 2007 09:22:30 GMT

Hi Guys,

Thanks a lot for your suggestions.
Sharing the keys has done the trick.
It is working as we expected it to.

Thanks and regards
Kaushik