The known_hosts file is a z/OS OpenSSH file, not a Co:Z SFTP file.

Server public keys are automatically added to the user-level known_hosts
file if you have the SSH "StrictHostKeyChecking=no" option set AND this is
the first time you have connected to this host  (the same name and ip
address).

I can't explain why multiple entries would have been added to known_hosts
for the exact same tuple: (host, ip address, key type) - you may want to
contact IBM if this is the case.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Thu, Jul 13, 2017 at 1:04 PM, Dazzo, Matt <
[email protected]> wrote:

> We have been using Co:z SFTP with Coz: Batch for a few years. We are
> always connecting as an ssh client as we are not using sshd server at this
> time. For every connection to every server I noticed that the RSA cert is
> added to the known hosts file. So there are many, many of the same RSA
> certs for each server in the known hosts file. I believe this only started
> happening a few/several months ago but can't pin point the exact time.
> RSU1702 and additional PTF's were applied  also a few months ago. I went
> back through the held data for the maint but did not find anything
> pertaining to the host file.  We are at the latest level of cozbatch and
> coz:sftp, and at zos2.2.
>
> Is anyone else experiencing this and what might cause this to happen?
>
> Thanks
> Matt
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to