Issues with SSH - Public key authentication method on a Serviceguard cluster

[kaushikbr]

Hi,

We are trying to use SSH Public key based authentication on a Serviceguard cluster ( 2 node cluster ).
We are running HP-UX B11.23 ( on Itaniums ) and upgraded ssh to A.04.30.015.

We are trying to configure the Serviceguarded cluster as the ssh server for scp mainly.

We have configured the ssh 2 protocol & using the RSA keys on serviceguard cluster. We have configured the RSA keys on both members of the cluster.

The problem we are facing at the moment;
When we try to do a SCP on the serviceguard packages, ssh detects the scp call as a intrusion and does not accept the connection.

We have a requirement that we do the SCP to the serviceguard package.
Is there a way around this or is there a known method of doing this.

Thank you all in advance for your advice and suggestion.

Regards
Kaushik

[Ivan Krastev · Accepted solution]

Try to share one host key for all servers - see this thread : http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=952189

regards,
ivan

[Steven E. Protter]

The floating ip address moves from machine to machine. ssh to preven intrusion and such checks the mac address and can detect when the system that owns the floating ip address has been changed.

Therefore the shared key is the only way to go to prevent his (see previous post).

SEP

[kaushikbr]

Hi Guys,

Thanks a lot for your suggestions.
Sharing the keys has done the trick.
It is working as we expected it to.

Thanks and regards
Kaushik