LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 06-23-2006, 02:52 PM   #1
dave`2005
Member
 
Registered: Aug 2005
Distribution: Ubuntu 7.10, Slackware 12
Posts: 270

Rep: Reputation: 30
ssh "remote host identification has changed"


Hi all, when trying to connect to this pc from my laptop using ssh i get:
Code:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
0a:ba:c7:69:bc:45:6e:a3:15:65:b3:c9:55:ac:7c:73.
Please contact your system administrator.
Add correct host key in /home/abc/.ssh/known_hosts to get rid of this message.
Offending key in /home/abc/.ssh/known_hosts:2
RSA host key for 24.67.216.219 has changed and you have requested strict checking.
Host key verification failed.
Ive tried deleting the .ssh folder on both machines but i get the same thing. How do i fix this?

Any help appreciated.
 
Old 06-23-2006, 03:08 PM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
Take it out of the known_hosts file under .ssh of the originating user. Of course you should first be sure the machine you're hitting is the one you think it is.
 
Old 06-23-2006, 03:27 PM   #3
hockeyman_102
Member
 
Registered: Apr 2006
Location: Washington
Distribution: Suse, CentOS, Ubuntu
Posts: 124

Rep: Reputation: 15
jlightner has the quickest fix. Your computer thinks that ip address should have a different RSA associated with it. you can edit the /home/abc/.ssh/known_hosts:2 file and take out that IP or just completely remove the file. By removing the file your computer will ask you if you if its okay to connect with even old ssh connections.
 
Old 06-23-2006, 04:21 PM   #4
katayamma
Member
 
Registered: Jan 2006
Posts: 37

Rep: Reputation: 15
You should contact the owner/admin of the remote machine to verify that the key change was on purpose. Such changes can indicate that the machine's been compromised, usually by an SSH demon that logs usernames/passwords and passes them upstream to the hacker.

If the machine has been compromised and you use a "common password" for that machine and others, I'd go about changing them all just to be paranoid.

Cheers
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
FTP problem "connection closed by remote host" with RHEL4 and Windows 2003 hooijack Linux - Enterprise 0 03-23-2006 10:29 PM
REMOTE HOST IDENTIFICATION HAS CHANGED problem umeshbabu Linux - Networking 1 08-23-2005 08:29 AM
ssh login problem RedHat AS3 ("Did not receive identification string from") spaniel Linux - Security 1 07-03-2005 07:50 AM
Couldn't display "SMB:///" , No host "(Null)" could been Found?????? munkey Linux - Newbie 3 05-03-2004 05:30 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 12:08 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration