LAM/MPI General User's Mailing List Archives

From: Rodney Mach (rwm_at_[hidden])
Date: 2005-07-01 14:56:35

• Next message: Jeff Squyres: "Re: LAM: lamtests-7.1.1 ERROR with PGI compiler 6.0"
• Previous message: Jeff Squyres: "Re: LAM: Restricting TCP Ports"

> In short: there is nothing gained by trying to hide node public keys.

If your sysadmin is concerned with the "info leakage" of known_hosts
(e.g. hostname of machines listed makes it easy for attacker to see
which host to try next) they can use the new hashing features in OpenSSH
4.X that basically "hides" the hostnames by hashing them. This is
disabled by default, and is described in the man pages for ssh-keygen
and ssh_config.

-Rod

• Next message: Jeff Squyres: "Re: LAM: lamtests-7.1.1 ERROR with PGI compiler 6.0"
• Previous message: Jeff Squyres: "Re: LAM: Restricting TCP Ports"