Re: public key access error

From: Bill Unruh (unruh_at_string.physics.ubc.ca)
Date: 10/29/04


Date: 29 Oct 2004 21:56:10 GMT


"Daniel Huang" <danielhuang@hotmail.com> writes:

]Hi, I have one Linux client machine A get reinstalled yesterday and the it's
]ssh hostkey got changed.

Yes. If you saved the old key (in /etc/ssh) just put it back and all will
be well. If you did not, next time remember to always save the whole of
/etc/ before you reinstall.

]but We used to login in to this machine A with public key through another
]unix machine B which we dont' have root access.

]Since the linux client A box's host key was changed , so when we try to ssh
]to the linux A from the unix machine B, we got reject as the B still trying
]to remember the old linux B host key.

]I remove the host key from the known_hosts file from unix B, still got msg:

They can be there either as host name or as ip address, or both. Remove
both.

] @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
] @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
] @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
] IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
] Someone could be eavesdropping on you right now (man-in-the-middle
]attack)!
] It is also possible that the RSA host key has just been changed.
] The fingerprint for the RSA key sent by the remote host is
] 23:00:20:83:de:02:95:f1:e3:34:be:57:3f:cf:2c:e7.
] Please contact your system administrator.
] Add correct host key in /home/xahria/.ssh/known_hosts to get rid of this
]message.
] Offending key in /home/xahria/.ssh/known_hosts:8

This tells you which line in known_hosts you need to remove.

Remove it.

] RSA host key for localhost has changed and you have requested strict
]checking.
] Host key verification failed.

]looks like the unix B's stricthostkeychecking=yes, and won't allow us to
]change any machine's host key.

]Any idea on this ?

Remove line 8 in /home/xahria/.ssh/known_hosts

]Thanks



Relevant Pages

  • public key access error
    ... I have one Linux client machine A get reinstalled yesterday and the it's ... ssh hostkey got changed. ... unix machine B which we dont' have root access. ... Since the linux client A box's host key was changed, so when we try to ssh ...
    (comp.os.linux.security)
  • Re: public key access error
    ... I have one Linux client machine A get reinstalled yesterday and the it's ... >]unix machine B which we dont' have root access. ... >] It is also possible that the RSA host key has just been changed. ...
    (comp.os.linux.security)