LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-17-2005, 01:32 AM   #1
joanna
LQ Newbie
 
Registered: Dec 2005
Posts: 1

Rep: Reputation: 0
scp without password not reliable


Hi,

I would like to scp from my linux box to a pc w/out a password. The linux is "stargate" and pc is "joannah"

I have set public/private keys such that my linux has /root/.ssh/id_dsa.pub and my pc has /home/.ssh/authorized_keys and /home/.ssh/authorized_keys2.


Sometimes, when i do:

scp file johndoe@my_ip.edu:

the file transfers ok, with no warning and no need to enter password. but sometimes i get the error:
-----------------------------------------
the rsa host key for my_ip.edu has changed and the key for the according IP address 123.4.5.6 is unknown. this could iehter mean that dns spoofing is happening or the ip address for the host and its host key have changed at the same time

it is possible that someone is doing something nasty! someone could be eavesdropping on you right now (man-in-the-middle attack)! is is also possible that the rsa host key has just been changed. please contact your system administrator. add correct host key in /root/.ssh/known_hosts to get rid of this message. rsa host key for seas.ucla.edu has changed and you have requested strict checking.
--------------------------------------------


i'm not sure why sometimes the scp works and sometimes it fails and i get warning above.

any comments would be appreciated.

Thanks!

Last edited by Capt_Caveman; 12-17-2005 at 10:21 PM.
 
Old 12-17-2005, 11:55 AM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
It tells you it could be an attack so you can't rule that out.

However I'm guessing you're running DHCP on your Linux box so its IP is changing. As noted in the message you see that's one of the things that could cause the problem. DHCP sets your IP from a range of possible IPs allowed. If this is on a home network and you're using a router just make sure to always plug into the same port to get the same IP. If its in an office setting you may need to ask whoever runs the DHCP server to give you a static address or at least increase the reservation time so it doesn't lose it quickly.
 
Old 12-17-2005, 10:23 PM   #3
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
//Moderator note:

@joanna: Probably not a good idea to post usernames and IPs on the internet like that. I removed them just to avoid any issues.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Include scp password in command cli_man Linux - General 1 08-05-2005 03:47 PM
ssh/scp without password not working Mauline Linux - Security 4 03-30-2005 09:26 PM
scp, don't prompt password!! dlublink Linux - Networking 1 01-03-2005 12:54 PM
scp still ask for root 's password when executing... Laplace Linux - General 1 03-02-2003 07:45 AM
scp and no password mikeyt_333 Linux - General 2 03-26-2002 03:33 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:30 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration