LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 02-05-2005, 06:22 AM   #1
Napalm Llama
Member
 
Registered: Nov 2004
Location: Bristol, UK
Distribution: Gentoo 2005.0
Posts: 224

Rep: Reputation: 30
SSH not verifying properly...


This is kind of a newbie question, but I don't consider myself to be a total know-nothing anymore - I had that phase for the last few months!

Anyhoo, I've been trying to get my SSH daemon (OpenSSH I think) to work. To begin with it was simply refusing connections, but now when telnetted to my isp's remote terminal, I get this:

Code:
myusername@isphost myusername $ ssh my.host.name
The authenticity of host 'my.host.name (this.was.my.ip)' can't be established.
DSA key fingerprint is 06:1f:72:0a:d9:32:e3:ab:89:32:a6:dd:92:c3:51:26.
Are you sure you want to continue connecting (yes/no)? no
Host key verification failed.
myusername@isphost myusername $
I'm sure it's a simple configuration problem, but unfortunately I don't really know where to start, other than probably somewhere in /etc...

(If anybody thinks exposing my 'DSA key fingerprint' like this is a security hazrard, please let me know and I'll censor it, too)

I know I could have typed 'yes' and connected, but I don't want to do that until I know it's going to be secure.

What do people think?
 
Old 02-05-2005, 06:44 AM   #2
{BBI}Nexus{BBI}
Senior Member
 
Registered: Jan 2005
Location: Nottingham, UK
Distribution: Mageia 6, KDE Neon
Posts: 4,313

Rep: Reputation: 212Reputation: 212Reputation: 212
Hmm? I'm not sure I understand the nature of your dilema. The authentication can't be established if you've never connected to your isps remote terminal before as they don't have a copy of your digital fingerprint on their system (or maybe vice-versa). If you said yes to connect then disconnected, reconnect again and you shouldn't see the authentication error message again. At least that's the way mine works. As to the exposure of your digital fingerprint being insecure I can't comment.
 
Old 02-05-2005, 06:44 AM   #3
daft
LQ Newbie
 
Registered: Jan 2005
Distribution: Debain
Posts: 25

Rep: Reputation: 15
a main feature of the ssh protocol is the DSA key fingerprint this one is random created and makes shure your connecting to you box your want to connect with.
if it is the 1st time you connect you dont have the fingerprint yet so you need to say 'Yes' to that question.
 
Old 02-05-2005, 07:14 AM   #4
Napalm Llama
Member
 
Registered: Nov 2004
Location: Bristol, UK
Distribution: Gentoo 2005.0
Posts: 224

Original Poster
Rep: Reputation: 30
Really?

So in that case, I can choose 'yes', and I'm still connecting securely, and the remote host will remember me, and remember that I'm trustable.
Right?

(In case of any inclarities, I was telnetting to my ISP's machine, then ssh'ing back to my own - I know this doesn't make sense for general use, but I wanted to see what my machine looked like from a remote computer.)
 
Old 02-05-2005, 10:48 AM   #5
Linux~Powered
Member
 
Registered: Jan 2004
Location: /lost+found
Distribution: Slackware 14.2
Posts: 849

Rep: Reputation: 33
Quote:
Really?
Yeah, that's how it works. When you enter "yes" it wont ask you save the key next time you log into that box. It stores the key in ~/.ssh/known_hosts
 
Old 02-05-2005, 11:13 AM   #6
Napalm Llama
Member
 
Registered: Nov 2004
Location: Bristol, UK
Distribution: Gentoo 2005.0
Posts: 224

Original Poster
Rep: Reputation: 30
OK, cool. Thanks

Now I don't have to use telnet! Yay!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how to setup rsh or configure ssh properly cheeku Linux - Software 5 03-30-2006 07:47 AM
System won't boot properly knoppix doesn't initialize properly rodewan Linux - Software 0 01-23-2005 03:35 PM
Verifying CD's Caysho Linux - General 1 12-24-2004 08:14 PM
Verifying Patch installation ceyan Solaris / OpenSolaris 3 08-21-2004 05:02 AM
SSH not installing properly slackwarefan Slackware 2 10-30-2003 07:23 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:49 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration