SSH and user rights questions

[mozingod]

Ok, two quick questions...

1) How can I get ssh to ignore the whole "Are you sure you want to continue connecting?" question and either always add the server to the list of known hosts, or just not ask the question and always connect to the host?

2) How could I give a normal user rights to bind a socket to an interface?

The point of these questions is for my Nagios server. I need the nagios user to be able to run a check_dhcp plugin and bind to the eth0.20 interface (one of the trunked connections coming to the machine), and be able to ssh into servers on the network to execute other plugins. Any help on these questions would be much appreciated. Thanks!

[meowsqueak]

1. I think the option 'CheckHostIp' in /etc/ssh/ssh_config (or ~/.ssh/config) can be used to achieve this. Might be worth experimenting to find out.

2. Any user can bind a socket to an interface, provided the port number is greater than 1023. Only root can bind sockets to ports below 1024.

You run the ssh daemon on high, unprivileged ports with -p port.

Hope this helps? Sorry if I misunderstood what you're trying to do - I'm not 100% sure I know what you're trying to achieve.

[mozingod]

I'll check on the first answer tomorrow, thanks.

About the socket binding, it's below 1023 (DHCP port, forget what it is off hand). As I said, I'm doing it for Nagios since it runs as a normal user and a plugin to check for DHCP broadcasts needs to bind to the DHCP port to check. Anyway to achieve this?

[mozingod]

Cool, in the /etc/ssh/ssh_config file I changed

[mozingod]

*bump* Is it possible to let normal users bind to a port less than 1023?

[meowsqueak]