Displaying 1 result from an estimated 1 matches for "generqally".
Did you mean:
generally
2023 Nov 15
0
@cert-authority for hostbased auth - sans shosts?
...synced at all (conversely: no more ssh breakage
"from first principles"), unless the CA root has to be rotated.
Cheers, Marian
Well, issuing user certs or leveraging AuthorizedKeysCommand can help in the case where pubkey authentication is used instead of hostbased. But, hostbased is generqally seen as more convenient in a cluster situation. I assume that you are aware of the shosts.equiv file, which can reduce the need for individual .shosts files.
As an aside, there doesn't seem to be any documentation in the man pages regarding the format of shosts.equiv, ~/.shosts, etc. I thoug...