[Nagiosplug-help] check_by_ssh does not seem to honour StrictHostKeyChecking

Patricia Jung pju at censhare.de
Wed Dec 1 13:10:17 CET 2010


Am 01.12.2010 um 02:23 schrieb Thomas Guyot-Sionnest:
> On 10-11-29 11:10 AM, Patricia Jung wrote:
>> when monitoring service-bound IPs using check_by_ssh I encounter the problem that several servers might answer which have differing ssh server keys. This way the service check fails whenever the answering server changes. A (far from perfect) solution to this would be to set StrictHostKeyChecking to no for the relevant IP. check_by_ssh however does not seem to honour this setting (not 1.4.15 and below) -- as long as I don't remove the offending key from known_hosts the plugin will time out.
> 
> Can't you pass it with the -o option?
Good idea -- with a tiny drawback: This requires a new check command for service IP checks, and changing the Nagios configuration this way is much more cumbersome than setting  StrictHostKeyChecking=no in .ssh/config for the IPs in question.

Well... one must not be too lazy, right?

Thanks a lot

   Patricia
-- 
Patricia Jung 
Senior Software and Support Engineer 

censhare AG
Paul-Gerhardt-Allee 50, 81245 Muenchen, Germany
Fon +49 89 568236-311 
Fax +49 89 568236-501
http://www.censhare.com
http://blog.censhare.com
Pflichtangaben/Mandatory Information: http://www.censhare.com/pflichtangaben






More information about the Help mailing list