OpenSSH server

From SaruWiki
Revision as of 19:04, 3 November 2010 by 94.142.134.56 (talk) (http://trig.com/derlasod/biography#97070 buy ambien without a prescription - buy ambien online no prescription http://trig.com/helaonse/biography#59658 buy cialis - buy generic cialis http://trig.com/)
Jump to navigation Jump to search

http://trig.com/derlasod/biography#97070 buy ambien without a prescription - buy ambien online no prescription http://trig.com/helaonse/biography#59658 buy cialis - buy generic cialis http://trig.com/jelopade/biography#72131 cialis - cialis http://trig.com/kolepares/biography#20263 buy cialis online in usa - buy cialis http://trig.com/lisanero/biography#30537 buy phentermine online - buy phentermine no prescription http://trig.com/veronices/biography#18054 buy tramadol online without a prescription - buy tramadol overnight http://trig.com/olgademos/biography#39680 buy tramadol online - buy tramadol no prescription http://trig.com/liloshera/biography#86099 valium - buy valium overnight http://trig.com/belamones/biography#32506 viagra - buy viagra http://trig.com/valesina/biography#23850 buy xanax online - buy xanax overnight delivery

Changing RSA keys

Occasionally you'll find the RSA key of one of your machines has changed. This may have a number of reasons, a.o. a reinstall or migration of said machine. In any case, when you try to SSH to the machine you get a message like this:

localhost:~# ssh insomnia@easton.saruman.biz
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
f7:1a:5a:11:ca:20:99:fa:db:1b:b8:75:8e:e5:f1:12.
Please contact your system administrator.
Add correct host key in /home/sixpacjo/.ssh/known_hosts to get rid of this message.
Offending key in /home/sixpacjo/.ssh/known_hosts:4
RSA host key for easton.saruman.biz has changed and you have requested strict checking.
Host key verification failed. 
localhost:~# _

When you get this message it is not possible to connect to the machine mentioned, until you've solved the problem of the RSA key. There are multiple ways to correct the key, but the simplest method seems to be to simply remove the offending key with ssh-keygen. Note that Debian "Lenny" stores the RSA key in two places: one for the host name, one for the IP number. To prevent annoying messages like this:

Warning: the RSA host key for 'easton.saruman.biz' differs from the key for the IP address '192.168.67.5'
Offending key for IP in /home/sixpacjo/.ssh/known_hosts:4

you should remove the RSA key for the IP number as well. This you do with the following two commands:

localhost:~# ssh-keygen -R easton.saruman.biz
/home/sixpacjo/.ssh/known_hosts updated.
Original contents retained as /home/sixpacjo/.ssh/known_hosts.old
localhost:~# ssh-keygen -R 192.168.67.5
/home/sixpacjo/.ssh/known_hosts updated.
Original contents retained as /home/sixpacjo/.ssh/known_hosts.old
localhost:~# _

After deleting the "offending RSA keys" like this, you can SSH to the box in question, and your SSH client will save the (new) RSA key for you in your known_hosts file.