Is there a way to prevent this message:The authenticity of host can't be established.

abefroman · 11-27-2009, 02:02 PM

Is there a way to prevent this message:

Code:

root@100 [~]# ssh -q xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is 4c:83:...:7d:19.
Are you sure you want to continue connecting (yes/no)?

I tried ssh -q and -y but those did not work.

EricTRA · 11-27-2009, 02:08 PM

Hello Abe,

This happens when you login to a server using SSH for the first time on that server I believe. Normally if you answer yes then the key will be added to the known_hosts file and the next time that message should not appear.

It's a form of key protection agains man in the middel attack. You can read more about it here.

Kind regards,

Eric

abefroman · 11-27-2009, 02:21 PM

Quote:

Originally Posted by EricTRA

Hello Abe,

This happens when you login to a server using SSH for the first time on that server I believe. Normally if you answer yes then the key will be added to the known_hosts file and the next time that message should not appear.

It's a form of key protection agains man in the middel attack. You can read more about it here.

Kind regards,

Eric

Yes, but the thing is I want to run rsync remotely on hundreds of servers, and do not want to log into each one and have to type yes.

EricTRA · 11-27-2009, 02:32 PM

I understand but you'd only need to do it the first time. Maybe there's a way to automate it with something like dssh. Another possibility is of course to generate key pairs and copy over the key to the destination server. If you do it the right way then the complete process of authentication takes place using the keys and you wouldn't even have to introduce a password.

Kind regards,

Eric

david1941 · 11-27-2009, 02:38 PM

You might look at the yes command (man yes) as it is helpful for automatic responses.

EricTRA · 11-27-2009, 02:42 PM

Hey david1941,

Thank you very much, learned another one yet. Didn't know that one.

Thumbs up.

Kind regards,

Eric

abefroman · 11-27-2009, 02:46 PM

Quote:

Originally Posted by david1941

You might look at the yes command (man yes) as it is helpful for automatic responses.

Thanks but that doesn't seem to work for ssh. It just repeated my command over and over, and still didn't update the rsa fingerprint.

EricTRA · 11-27-2009, 02:51 PM

Hi Abe,

Too bad that didn't help you out. Maybe this can help you on you quest.

DSSH.

Kind regards,

Eric

win32sux · 11-27-2009, 02:52 PM

You're not planning to blindly accept these hundreds of public keys, are you?