LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-31-2005, 07:38 AM   #1
bruse
Member
 
Registered: Feb 2005
Location: internet
Distribution: Debian
Posts: 821

Rep: Reputation: 30
scp error.


mandrake 10.0

i have error during copy the file.

[staff@ws061 staff]$ scp wine-20041019-mdk.i586.rpm 10.255.240.102://home/staff/
No RSA host key is known for 10.255.240.102 and you have requested strict checking.
Host key verification failed.
lost connection
[staff@ws061 staff]$

what this error means?
how to overcome this?
thanks.
 
Old 08-31-2005, 08:16 AM   #2
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387
Hi,

The RSA host key cannot be found (first connect to this host? was that host newly reconfigured?).

Due to the strict checking you enabled (or someone else did) ssh (scp) will not trust this host.

There's a lot of info on the net about this........

First goolge hit: http://www.securityfocus.com/infocus/1806

Hope this helps.
 
Old 08-31-2005, 08:37 AM   #3
bruse
Member
 
Registered: Feb 2005
Location: internet
Distribution: Debian
Posts: 821

Original Poster
Rep: Reputation: 30
good luck.

i have transfered that file using fish:// in konqueror.

IT IS TIME TO KNOW THAT WHAT WHAT IS THE PROTOCOL USED BY FISH PROGRAM FOR A BETTER AND FASTER TRANSFER.

earlier i thought fish using scp to transfer the file.
now it is proved that it is using some other?

pls tell me what is the way fish using?
 
Old 08-31-2005, 09:01 AM   #4
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387
Hi,

Never used (or even heard of) fish. Cannot help you there.

BUT: Using google (your homepage, rigth ) you can find info (that fish is using ssh to name just one).
 
Old 08-31-2005, 09:31 AM   #5
bruse
Member
 
Registered: Feb 2005
Location: internet
Distribution: Debian
Posts: 821

Original Poster
Rep: Reputation: 30
very good .

thanks.
 
Old 08-31-2005, 05:01 PM   #6
koodoo
Member
 
Registered: Aug 2004
Location: a small village faraway in the mountains
Distribution: Fedora Core 1, Slackware 10.0 | 2.4.26 | custom 2.6.14.2, Slackware 10.2 | 11.0, Slackware64-13
Posts: 345

Rep: Reputation: 32
Re: scp error.

Quote:
Originally posted by bruse

[staff@ws061 staff]$ scp wine-20041019-mdk.i586.rpm 10.255.240.102://home/staff/
[staff@ws061 staff]$

Hey! Just noticed one thing, I always did scp with a single '/'.
I mean instead of using 10.255.240.102://home/staff/ I use 10.255.240.102:/home/staff/
Is there any difference or was the earlier one a typo.

Thanks.
 
Old 09-01-2005, 03:12 AM   #7
Rinish
Member
 
Registered: Apr 2005
Location: Bangalore
Distribution: Redhat, CentOS, AIX
Posts: 93

Rep: Reputation: 15
If Iam not wrong, Fish uses port 22 (ssh/scp) but they does'nt check any Authentication keys such as RSA and DSA by default.

/ Rinish (rinishriju)
 
Old 09-02-2005, 02:23 PM   #8
koodoo
Member
 
Registered: Aug 2004
Location: a small village faraway in the mountains
Distribution: Fedora Core 1, Slackware 10.0 | 2.4.26 | custom 2.6.14.2, Slackware 10.2 | 11.0, Slackware64-13
Posts: 345

Rep: Reputation: 32
Quote:
Originally posted by Rinish
If Iam not wrong, Fish uses port 22 (ssh/scp) but they does'nt check any Authentication keys such as RSA and DSA by default.

/ Rinish (rinishriju)

This is what I get when I try to access some unknown host (say 10.10.11.32) via FISH :

Code:
The authenticity of host '10.10.11.32 (10.10.11.32)' can't be established.
RSA key fingerprint is 36:db:e9:17:73:dd:79:8c:8f:f5:bf:90:5c:2a:9b:35.
Are you sure you want to continue connecting (yes/no)? 

                                 Yes                      No
and this is the default behaviour on my system.
 
Old 09-02-2005, 03:17 PM   #9
svenwinkle
LQ Newbie
 
Registered: Sep 2005
Location: north
Distribution: gentoo
Posts: 23

Rep: Reputation: 15
Hey, here's how you fix your problem. ssh grabs information from the computer that you are connecting to and stores it in a file. If the computer you are connecting to ever reboots or reconfigures its keys, the stored key you have on your computer will no longer work. When this happens, the easiest way (I have found) to resolve the issue is to go into that file where the key information about the other computer is stored and erase that computer's entry. You can then re-connect and get new key information that your computer will accept.

The file is called known_hosts. It is stored in your user's home directory inside a folder called .ssh. You won't see this folder during a normal directory listing (ls), but if you use ls -a you will see it. So the full path is then /home/<username>/.ssh/known_hosts

Use your editor of choice (mine is vi) to access that file. You will see an entry for every computer you have ever used ssh to access. For each computer there will be an entry similar to the following:

192.168.50.188 ssh-rsa AAAAB3NzaC1yc2EAAAABIwBBBIEA4j3rP1kgqZNKmk198dp9ZatqAV7KnPmI
7ZfDSWYrmYx6HpS316wrx+jpUHBjyWe7eCMLiNm2jaU8MEoJBWZNsYj8HX3z+v7ataE8zvZ7EUmnNY3F
Fhvb1DWdeIUqa4kSKE5RuADAaAa/eVyOs7wf+MGYrdZW4ZX1kk1i9I46x/k=

This is all one entry. You can identify the entry belonging to the computer in question by the IP address. Delete that entire line(in vi you just move the cursor to the line and type dd). Save the file and exit (in vi the command for that is :wq!) .

When you are finished with that, you can connect into the remote computer again with ssh. You will have to type 'yes' again when it asks if you want to accept the host key. At that point it should be working properly.

Good luck!
 
Old 09-02-2005, 04:44 PM   #10
koodoo
Member
 
Registered: Aug 2004
Location: a small village faraway in the mountains
Distribution: Fedora Core 1, Slackware 10.0 | 2.4.26 | custom 2.6.14.2, Slackware 10.2 | 11.0, Slackware64-13
Posts: 345

Rep: Reputation: 32
Quote:
Originally posted by svenwinkle
Hey, here's how you fix your problem. ssh grabs information from the computer that you are connecting to and stores it in a file. If the computer you are connecting to ever reboots or reconfigures its keys, the stored key you have on your computer will no longer work. When this happens, the easiest way (I have found) to resolve the issue is to go into that file where the key information about the other computer is stored and erase that computer's entry. You can then re-connect and get new key information that your computer will accept.

The file is called known_hosts. It is stored in your user's home directory inside a folder called .ssh. You won't see this folder during a normal directory listing (ls), but if you use ls -a you will see it. So the full path is then /home/<username>/.ssh/known_hosts

Use your editor of choice (mine is vi) to access that file. You will see an entry for every computer you have ever used ssh to access. For each computer there will be an entry similar to the following:

192.168.50.188 ssh-rsa AAAAB3NzaC1yc2EAAAABIwBBBIEA4j3rP1kgqZNKmk198dp9ZatqAV7KnPmI
7ZfDSWYrmYx6HpS316wrx+jpUHBjyWe7eCMLiNm2jaU8MEoJBWZNsYj8HX3z+v7ataE8zvZ7EUmnNY3F
Fhvb1DWdeIUqa4kSKE5RuADAaAa/eVyOs7wf+MGYrdZW4ZX1kk1i9I46x/k=

This is all one entry. You can identify the entry belonging to the computer in question by the IP address. Delete that entire line(in vi you just move the cursor to the line and type dd). Save the file and exit (in vi the command for that is :wq!) .

When you are finished with that, you can connect into the remote computer again with ssh. You will have to type 'yes' again when it asks if you want to accept the host key. At that point it should be working properly.

Good luck!

Correct me if I am wrong.

I also have experienced the problem you have mentioned i.e. if the host computer changes it's keys (not reboots) you get such an error and the best solution is to delete the entry corresponding to that particular I.P. from the ~/.ssh/known_hosts file.
But in that case the error you get is somewhat like this (I do not remember the exact error, though) : Remote key for concerned host has been changed. Host key verification failed. This might mean that somebody is spying on you, if this is not the case, edit the file ~/.ssh/known_hosts.

But in case of Bruse, he is getting the error : No RSA host key is known for 10.255.240.102 and you have requested strict checking.
Host key verification failed.
lost connection

This indicates that the RSA key does not exist (not changed), and since the user has requested strict checking Host key verification has failed.

I may be wrong though as I do not remember exactly what error you get in case of changed RSA keys.
My Apologies if that is the case

Hope this helps.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
scp does not work and gives the following error message: scp: FATAL: Executing ssh1 i akay Linux - Networking 16 09-29-2008 12:41 AM
scp error message basher400 Linux - Newbie 6 07-26-2007 04:48 AM
scp large files error sburns76247 Linux - Security 1 03-22-2005 06:23 PM
Scp Error chaitu_iiit Linux - Software 1 12-08-2004 10:08 AM
error with scp command eduac Linux - Security 2 08-07-2003 05:50 PM


All times are GMT -5. The time now is 11:04 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration