Adam Thornton wrote on 01/21/2009 10:36 AM:

> On Jan 21, 2009, at 9:27 AM, Ray Waters wrote:
>
> > I have the Starter System built (NOVSTART) and can logon to it via
> > putty @ 172.16.28.62.
> >
> > Yesterday I brought up NOVSTART(172.16.28.62) and my new LINUX guest
> > named LINUXEKM (172.16.28.63), ran SLES exec, and was able to
> > connect via ssh -X [email protected]<mailto:[email protected]> from
> > NOVSTART. It was too late in the day to start the configuration via
> > Yast, so I logged out of LINUXEKM then logged out of NOVSTART.
> >
> > Today I tried to start again and brought up NOVSTART, brought up
> > LINUXEKM, ran thru SLES exec as before with no problems. But when I
> > try to connect to the new guest via ssh -X [email protected]<
> mailto:[email protected]
> > > so I can configure, I get errors today. Yesterday it worked fine.
> > How do I fix this? There is no attack.
> >
> >
> > novstart:~ # ssh -X [email protected]
> > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> > Someone could be eavesdropping on you right now (man-in-the-middle
> > attack)!
> > It is also possible that the DSA host key has just been changed.
> > The fingerprint for the DSA key sent by the remote host is
> > 18:0d:e9:12:5b:f7:85:30:28:6c:f5:60:ab:b6:05:92.
> > Please contact your system administrator.
> > Add correct host key in /root/.ssh/known_hosts to get rid of this
> > message.
> > Offending key in /root/.ssh/known_hosts:4
> > DSA host key for 172.16.28.63 has changed and you have requested
> > strict checking.
> > Host key verification failed.
> > novstart:~ #
>
> If all you want to do is log in, delete line 4 of /root/.ssh/
> known_hosts.
>
> But it would probably be good to know WHY the host key changed.

When Ray said he ran SLES EXEC the second time, I think he meant he went
through the initial setup of LINUXEKM a second time.  That's probably what
regenerated the keys.

Douglas

>
> Adam

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to