Andrew Meyer via FreeIPA-users wrote:
I recently cleaned up a few server in my home lab. Deleted servers
that I no longer needed. However It seems I have a server with an IP address that used
previously. FreeIPA is reporting that it is in /var/lib/sss/pubconf/known_hosts but I
can't reverse engineer the hostname by doing sshkey -R 1.2.3.4. I have run into this
issue previously but it has bee quite some time. When I go to delete the line from
/var/lib/sss/pubconf/known_hosts it is gone. If someone could help me that would be
great. I didn't see anything on my FreeIPA master that indicated I did anything
there.
You could nuke it from orbit with sss_cache -H to invalidate the host
SSH pubkey cache on that machine.
Might also be worthwhile, if you use IPA DNS, to see if there are any
leftover entries.
rob