Ssh keys on floating ip address


 
Thread Tools Search this Thread
Operating Systems AIX Ssh keys on floating ip address
# 1  
Old 12-01-2014
Ssh keys on floating ip address

hello, i have two AIX6.1 machines. one of them is the "live" server that the users are connected to in order to do their job and the second is acting as a backup server just in case that there is some problem with the "live" one. i noticed that when i de-activate the resources from the one server and activate them on the backup server i have a problem with ssh keys because i have to remove the entry of the server from known_hosts file and authenticate the connection again. in known_hosts file i have the keys for the physical name of the 2 servers (ex. server1, server2) and also the key for the floating ip address (ex. server_float). when i switch applications from one server to another i have to remove the entry for server_float and re-authenticate the connection so that a new entry will be added. is there a way to have an entry or 2 in my known_hosts file that will accept connections from either server (server1, server2) without needing to remove the entry and add it again? Thank you
# 2  
Old 12-01-2014
Host keys are typically defined in /etc/ssh.

You could use the same host keys on both systems or define a third for "server_float" that is common to the two systems - if "server_float" has a separate IP address and is not an alias.
# 3  
Old 12-01-2014
ok i will try the first option to have the same public keys on /etc/ssh. Thank you
# 4  
Old 12-15-2014
i cannot make it work. i tried the first option but i think i can never make it work like that because as soon as server_float is down then i need to re-authenticate the keys on the last active server. so i tried to the second suggestion, to define a separate key for server_float but i dont seem to make it correctly. this is the steps that i followed so correct me if i missed anything: 1. from the server that server_float is active i copied the keys ssh_host_rsa_key ssh_host_rsa_key.pub and i give them a separate name 2. i added the new key ssh_host_rsa_CLUSTER_key on sshd_config file and restart sshd services 3. server_float is made inactive from server1. i send the new keys ssh_host_rsa_CLUSTER_key ssh_host_rsa_CLUSTER_key.pub on server2 under /etc/ssh 4. i added the key ssh_host_rsa_CLUSTER_key on sshd_config file on server2 and restarted the sshd services. 5. i activate server_float on server2 however, when i try to connect to server_float when it is active on server2 i get prompted to re-authenticate the connection. did i miss anything?
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Find active SSH servers w/ ssh keys on LAN

Hi, I am trying to complete my bash script in order to find which SSH servers on LAN are still active with the ssh keys, but i am frozen at this step: #!/bin/bash # LAN SSH KEYS DISCOVERY SCRIPT </etc/passwd \ grep /bin/bash | cut -d: -f6 | sudo xargs -i -- sh -c ' && cat... (11 Replies)
Discussion started by: syrius
11 Replies

2. Red Hat

Configuring the SSH keys..

I am currently working on setting up a server to scp some files over for backup purposes. Server 1 - Bob (Appliance) Server 2 - Sana (RH 5) Server 1 - 1 - Generated RSA2 2 - Collected the public key to be input on the backup server = Sana Server 2 - 1 - This is were I am stuck the... (4 Replies)
Discussion started by: NelsonC
4 Replies

3. Solaris

help with SSH keys

Hello, I could use some help with my ssh keys and agent. This is the issue. I have 2 different UNIX systems at work. One is the normal Solaris servers with my uid being the same throughout all the servers. I now have a different system for my desktop. A contractor came in and installed some SUN... (0 Replies)
Discussion started by: bitlord
0 Replies

4. OS X (Apple)

rsync and ssh keys help

Not specifically a mac question, but it's what I am using. I am setting up some replication for some file shares using rsync. The problem is that I am being given a little bit of a twist - I'm supposed to use a non-admin account to do it with. I have 2 boxes - Master and Slave with 1... (2 Replies)
Discussion started by: kleinboy
2 Replies

5. Shell Programming and Scripting

How helpful are ssh keys?

Hi frnz, I work in an environment, where I need to login to multiple UNIX sessions(Always types my password when prompted for) I heard of ssh keys which provides us a valid authentication and that avoids us typing the password. Now I want to generate the ssh keys and use in my... (2 Replies)
Discussion started by: dnam9917
2 Replies

6. Red Hat

SSH keys are not working

Hi, I've generated and posted pub. keys in the source system and the target. However, it is still prompting me for the password. Steps that I have taken. 1. Generated ssh keys : ssh-keygen. It created two files. 1. .ssh/id_rsa 2. .ssh/id_rsa.pub. 2.... (10 Replies)
Discussion started by: Afi_Linux
10 Replies

7. Shell Programming and Scripting

What are public keys in ssh and how do we create the public keys??

Hi All, I am having knowledge on some basics of ssh and wanted to know what are the public keys and how can we create and implement it in connecting server. Please provide the information for the above, it would be helpful for me. Thanks, Ravindra (1 Reply)
Discussion started by: ravi3cha
1 Replies

8. UNIX for Dummies Questions & Answers

SSH keys

Hi everyone, i wanted to generate ssh keys so that i can include the public key in the remote sever, so that for subsequent logins, i can do away with the keying in of the password. I consulted the man ssh-keygen man pages. "..Normally each user wishing to use SSH with RSA or DSA... (1 Reply)
Discussion started by: new2ss
1 Replies

9. UNIX for Advanced & Expert Users

SSH Keys Help

Hello, I'm wondering if anyone has a step-by-step instruction set for setting up ssh keys? I've gone through many of the manuals online (most seem to be from the same source) and it's a little bit unclear when the documentation is talking about the server versus the client machine. I'm missing... (1 Reply)
Discussion started by: sysera
1 Replies
Login or Register to Ask a Question