I have had this issue on mac osx when sshing into a remote machine. Usually 
iall you need to do is remove the know_hosts file and that will clear the 
problem.

Regards,
Jonathan


-----Original Message-----
From: Andrew Meyer via FreeIPA-users <[email protected]> 
Sent: Monday, 14 September 2020 21:31
To: [email protected]
Cc: Andrew Meyer <[email protected]>
Subject: [Freeipa-users] Re: ssh key issues

I just ran sss_cache -H and that didn't fix it.  Still getting this:

[andrew.meyer@jump01 ~]$ ssh [email protected] 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is 
SHA256:eKvyhTmq6m3zlrJY8b+wVEPhaN5V2VE9vGiGmdrh18E.
Please contact your system administrator.
Add correct host key in /home/andrew.meyer/.ssh/known_hosts to get rid of this 
message.
Offending ED25519 key in /var/lib/sss/pubconf/known_hosts:6
ECDSA host key for 10.150.10.130 has changed and you have requested strict 
checking.
Host key verification failed.
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to