@oscar : i have remove host from .passlist but nothing change. On ossec.log it still OSSEC- agentless:INFO:ssh_integrity_check_linux:[email protected] RSA host key for '[email protected] has change. Unable to access. @dan : i can't find any information from /var/ossec/.ssh/known_hosts (No such file or directory)
Nino On 17 Mar, 02:57, "dan (ddp)" <[email protected]> wrote: > Quick guess: > The host key entry seems to be stored in /var/ossec/.ssh/known_hosts > Update that entry and you should be good to go. One method would be > copying the entry from another known_hosts file that has sshed into > the system and accepted the host key. It'll look something like: > buffalo1,192.168.1.111 ssh-rsa > LONG_STRING_OF_ALPHA_NUMERIC_CHARACTERS_AND_THE_OCCASSIONAL_/ > > I forget how the documentation says to add the key (or if the > registration automatically takes care of this for new systems). > > > > On Mon, Mar 15, 2010 at 3:23 AM, Nino Ibrahim <[email protected]> wrote: > > Hello, > > > I use OSSEC agentless to monitoring integrity of my VMware ESX, > > yesterday i need to reinstall my VMware ESX after i done OSSEC > > agentless getting error when need to access. The error message i get > > OSSEC-agentless:INFO:ssh_integrity_check_linux:[email protected] RSA > > host key for '[email protected] has change. Unable to access. > > Is anyone know how to solve this? > > > Thank you > > > Nino
