linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] SSH Updates

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: [[Linux-announce] ] SSH Updates
Date: Fri, 3 Mar 2023 16:17:21 +0100
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 104.47.22.43) smtp.rcpttodomain=lists.psi.ch smtp.mailfrom=psi.ch; dmarc=pass (p=none sp=none pct=100) action=none header.from=psi.ch; dkim=none (message not signed); arc=none (0)
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=w2fJ/dOnlMZC2gD19JabdYp+qL1xbdAQbq0BzrhdCXY=; b=TcG9DzgFz5IcqY5tfOq0wE1u0FuDXpeTHSARCe5XNk5x0yo4Csy9LWzmKVjsekjBT4SKb8Mc9sZm7mHcQeyyZeHqmStKABM2NGu6EvHWMKSWAuqUXXyqRGivm97P/jT55yuUgVU1X+52ZiY2kSkeYexiJ48ASEFKnOoq+7kdpHKwz7wylytfv+kNFAcxg/xqqfekOw9rJgCaJYU4rjlHitOFhgiNek8ZaCZ33fC/LZiviNRHsLzd0TsTUDhOlak2HktQFNnmz5zEasX52HVUcbI6jugPY8CjWG42pVxJeI2t8SzJZFYjcL1AERhgC0EhftB22MyW5hF+sIOu/WIkhw==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nzp1sD4d3oa/AeKRGhICHv9YGg6enrLHaGCnHSpqbwhj1wqiC9ma5Uk4tqVaTWpjy0GS/S7rOkdR494QqO3/ZNOgzLHkRqN5/dwymanwuVumAhP2P55rXIRiWfByUj5Du2OxeizASrm6G4x4VIlUg8NSMobQZ5nfkvgxOvfXNL+0tYeQSUajSkwyyamZRIrhM2v1DYoSilrU3s2XfKYprYlaaOSt3qqmR1sp2xUB2Wt1o2pJWsrP9D3Odn1r4l8xqz0JG1hCHN+NcWaqDeFnu1xgz+0D7LpFaNmMHbcMLsEjvXtgOEi+8BVzJHdnZrPp3y0CNcu8y8a7+0R5jwcEyA==
Authentication-results: mc2.ethz.ch; iprev=pass (mail-zr0che01on2053.outbound.protection.outlook.com) smtp.remote-ip=40.107.24.53; spf=pass smtp.mailfrom=psi.ch; dkim=pass header.d=psi.ch header.s=selector2 header.a=rsa-sha256; dmarc=pass header.from=psi.ch
Authentication-results-original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Dear Linux users and admins

new SSH certificates
====================

The management of SSH host key certificates has been redone. For best experience update your SSH CA key configuration as in https://linux.psi.ch/user-guide/ssh_host_key_certificates.html
For Puppet managed nodes this is rolled out already.

If you still encounter a

Certificate invalid: name is not a listed principal

then inform the admin of the machine how you accessed it so he can list it (or ask me how to do so ;-) )

new SSH client configuration guide
==================================

Feel free to have a look at https://linux.psi.ch/user-guide/ssh_client_config.html
If it is not OK tell me, else tell your (new) colleagues and users.

Cheers
Konrad

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
WHGA/038
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch

[[Linux-announce] ] SSH Updates, Konrad Bucheli (PSI), 03/03/2023