Re: public key access error

From: Huang, Daniel (danielhuang_at_hotmail.com)
Date: 10/30/04

  • Next message: Tim Haynes: "Re: Best way to run X application inside chroot environment"
    Date: Fri, 29 Oct 2004 19:23:15 -0400
    
    

    I had removed both.

    Besides the ~/.ssh/known_hosts, I think there is one entry in the the server’s global configuration file. /etc/ssh_known_host , which I don't have access to.

    And the one variable $securehostcheck was set to "yes" instead to "ask" ,(I don't remember the name, some thing like $securehostcheck )

    -- Daniel

    "Bill Unruh" <unruh@string.physics.ubc.ca> wrote in message news:clue9q$959$1@nntp.itservices.ubc.ca...
    > "Daniel Huang" <danielhuang@hotmail.com> writes:
    >
    > ]Hi, I have one Linux client machine A get reinstalled yesterday and the it's
    > ]ssh hostkey got changed.
    >
    > Yes. If you saved the old key (in /etc/ssh) just put it back and all will
    > be well. If you did not, next time remember to always save the whole of
    > /etc/ before you reinstall.
    >
    >
    > ]but We used to login in to this machine A with public key through another
    > ]unix machine B which we dont' have root access.
    >
    > ]Since the linux client A box's host key was changed , so when we try to ssh
    > ]to the linux A from the unix machine B, we got reject as the B still trying
    > ]to remember the old linux B host key.
    >
    > ]I remove the host key from the known_hosts file from unix B, still got msg:
    >
    > They can be there either as host name or as ip address, or both. Remove
    > both.
    >
    >
    >
    > ] @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    > ] @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
    > ] @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    > ] IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
    > ] Someone could be eavesdropping on you right now (man-in-the-middle
    > ]attack)!
    > ] It is also possible that the RSA host key has just been changed.
    > ] The fingerprint for the RSA key sent by the remote host is
    > ] 23:00:20:83:de:02:95:f1:e3:34:be:57:3f:cf:2c:e7.
    > ] Please contact your system administrator.
    > ] Add correct host key in /home/xahria/.ssh/known_hosts to get rid of this
    > ]message.
    > ] Offending key in /home/xahria/.ssh/known_hosts:8
    >
    > This tells you which line in known_hosts you need to remove.
    >
    > Remove it.
    >
    >
    > ] RSA host key for localhost has changed and you have requested strict
    > ]checking.
    > ] Host key verification failed.
    >
    > ]looks like the unix B's stricthostkeychecking=yes, and won't allow us to
    > ]change any machine's host key.
    >
    > ]Any idea on this ?
    >
    > Remove line 8 in /home/xahria/.ssh/known_hosts
    >
    >
    > ]Thanks
    >
    >


  • Next message: Tim Haynes: "Re: Best way to run X application inside chroot environment"

    Relevant Pages

    • Re: DNS, Man-in-the-middle??
      ... > my ISP's DNS server and tried to SSH to Speaker. ... > and its host key have changed at the same time. ... > It is also possible that the RSA host key has just been changed. ... It is behind my ISP NAT for my building(so it can only receive ...
      (Security-Basics)
    • DNS, Man-in-the-middle??
      ... Subject: DNS, Man-in-the-middle?? ... and its host key have changed at the same time. ... It is also possible that the RSA host key has just been changed. ... Elderbrain is behind Speaker's NAT. ...
      (Security-Basics)
    • Re: Network again!
      ... using the ssh client? ... It is also possible that the RSA host key has just been changed. ... The fingerprint for the RSA key sent by the remote host is ...
      (Ubuntu)
    • [HPADM] SSH Error
      ... When I am trying to connect to remote server using ssh it gives me following error. ... Add correct host key in /.ssh/known_hosts to get rid of this message. ... RSA host key for chinar has changed and you have requested strict checking. ...
      (HP-UX-Admin)
    • Re: Network again!
      ... > Is basic ssh connectivity working? ... It is also possible that the RSA host key has just been changed. ... The fingerprint for the RSA key sent by the remote host is ...
      (Ubuntu)