Well, after trying repeatedly to get an ssh version 2 client to connect to
an openssh server as a trusted host, and searching throughout the Internet
and the openssh mailing list archives, I finally discovered the following
statement at http://www.snailbook.com/faq/trusted-host-howto.auto.html:
"Note that OpenSSH does not implement hostbased authentication in its
protocol 2 support."
Doh! Well, that certainly explains the problem! ;-)
So, I guess we can force all our clients or servers to be version 1 for
now, but does anyone have any idea when hostbased authentication will be
implemented in the version 2 support?
Also, the openssh documentation implies that this SHOULD work (talks about
ssh_known_hosts and ssh_known_hosts2 quite interchangeably). Any chance
that the documentation can be ammended until version 2 support for
trusted-host authentication is actually added? It might save some
frustration...
Many thanks,
Brent Nelson
Sys. Manager
Dept. of Physics
University of Florida