Re: [CentOS] [OT] rsa host key change

2009-04-17 Thread Phil Schaffner
Bill Campbell wrote: ... That would make me very suspicious that the box had been cracked, and that a foreign sshd had been substituted for the real one. rpm -V is your friend. Also rkhunter and chkrootkit. ___ CentOS mailing list CentOS@centos.org

[CentOS] [OT] rsa host key change

2009-04-16 Thread Ed Donahue
Anyone ever come across a linux server host key changing with out a reboot, sshd restart, change in negotiating (SSHv1, SSHv2), and different DNS name or IP address? I have a server on RHEL4.4 that changed its host key. Red Hat Enterprise Linux ES release 4 (Nahant Update 4)

Re: [CentOS] [OT] rsa host key change

2009-04-16 Thread Bill Campbell
On Thu, Apr 16, 2009, Ed Donahue wrote: Anyone ever come across a linux server host key changing with out a reboot, sshd restart, change in negotiating (SSHv1, SSHv2), and different DNS name or IP address? That would make me very suspicious that the box had been cracked, and that a foreign sshd