Changeset f9665d1

Timestamp:

Jan 7, 2009 9:33:18 AM (15 years ago)

Author:

Ted Faber <faber@…>

Branches:

axis_example, compt_changes, info-ops, master, version-1.30, version-2.00, version-3.01, version-3.02

Children:

8bc5754

Parents:

ca24951

Message:

strict host key checking - having fedd ask for keys when contacting a new host is a no-no

File:

• fedd/federation/experiment_control.py (modified) (3 diffs)

fedd/federation/experiment_control.py

@@ -433 +433 @@
         """
 
-        scp_cmd = [self.scp_exec, '-o', 'IdentitiesOnly yes', '-i', 
+        scp_cmd = [self.scp_exec, '-o', 'IdentitiesOnly yes', 
+                '-o', 'StrictHostKeyChecking yes', '-i', 
                 self.ssh_privkey_file, file, "%s@%s:%s" % (user, host, dest)]
         rv = 0
@@ -454 +455 @@
         only logged.
         """
-        sh_str = "%s -o 'IdentitiesOnly yes' -i %s %s@%s %s" % \
+        sh_str = ("%s -o 'IdentitiesOnly yes' -o " + \
+                "'StrictHostKeyChecking yes' -i %s %s@%s %s") % \
                 (self.ssh_exec, self.ssh_privkey_file, 
                         user, host, cmd)
@@ -521 +523 @@
         # The expinfo ssh command.  Note the identity restriction to use only
         # the identity provided in the pubkey given.
-        cmd = [self.ssh_exec, '-o', 'IdentitiesOnly yes', '-i', 
+        cmd = [self.ssh_exec, '-o', 'IdentitiesOnly yes', '-o', 
+                'StrictHostKeyChecking yes', '-i', 
                 self.ssh_privkey_file, "%s@%s" % (user, host), 
                 expinfo_exec, pid, eid]