今天重新配置了下物理备机,然后配置SSH的时候提示下列错误:
[oracle@rac1 ~]$ ssh dg cat ~/.ssh/id_rsa.pub >>~/.ssh/authorized_keys
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
c5:3e:18:c6:f0:a8:d4:16:ff:04:8f:0b:8d:c7:a5:2d.
Please contact your system administrator.
Add correct host key in /home/oracle/.ssh/known_hosts to get rid of this message.
Offending key in /home/oracle/.ssh/known_hosts:9
RSA host key for dg has changed and you have requested strict checking.
Host key verification failed.
后来查出原因主要由于Linux系统重装或者OPENSSH-SERVER重装导致的,需执行下列命令
ssh-keygen -R IP
IP:指定连接目标的主机IP
[oracle@rac1 ~]$ ssh dg cat ~/.ssh/id_rsa.pub >>~/.ssh/authorized_keys
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
c5:3e:18:c6:f0:a8:d4:16:ff:04:8f:0b:8d:c7:a5:2d.
Please contact your system administrator.
Add correct host key in /home/oracle/.ssh/known_hosts to get rid of this message.
Offending key in /home/oracle/.ssh/known_hosts:9
RSA host key for dg has changed and you have requested strict checking.
Host key verification failed.
后来查出原因主要由于Linux系统重装或者OPENSSH-SERVER重装导致的,需执行下列命令
ssh-keygen -R IP
IP:指定连接目标的主机IP
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/30258496/viewspace-2063308/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/30258496/viewspace-2063308/
本文记录了一次配置物理备机过程中遇到的SSH连接警告问题及其解决办法。问题表现为远程主机标识发生改变,可能存在中间人攻击的风险。通过检查RSA主机密钥并使用ssh-keygen命令更新已知主机列表解决了该问题。

1340

被折叠的 条评论
为什么被折叠?



