Author Topic: Ssh Host Key Verification Failed  (Read 5330 times)

grog

  • Hero Member
  • *****
  • Posts: 692
    • View Profile
    • http://
Ssh Host Key Verification Failed
« on: September 14, 2005, 07:10:09 am »
Hi all. When trying to ssh out as a 'normal' user (one I created), I get the error 'Host key verification failed', but it works fine if I do it as root. I tried regening the Z's host keys, but made no difference. Is there a way to get this to work? thks
GROG!

Storm

  • Full Member
  • ***
  • Posts: 156
    • View Profile
    • http://
Ssh Host Key Verification Failed
« Reply #1 on: September 14, 2005, 11:58:22 pm »
Quote
Hi all. When trying to ssh out as a 'normal' user (one I created), I get the error 'Host key verification failed', but it works fine if I do it as root. I tried regening the Z's host keys, but made no difference. Is there a way to get this to work? thks
[div align=\"right\"][a href=\"index.php?act=findpost&pid=95798\"][{POST_SNAPBACK}][/a][/div]

If you are sshing out from the Zaurus and its complaining about the host key failing, then the host key on the remote box doesn't match the one on record in your (Zaurus) user's .ssh/known_hosts. This mechanism is to protect against man-in-the-middle (mitm) attacks.

If you are sure all is kosher with the ssh host key (e.g. the box was rebuilt or a new ssh key was regenned since the last time you sshed in from your user account), then you can edit the user's .ssh/known_hosts and delete the entry for that machine, then it should all be good. ssh will ask you the next time you log in from that account if you really want to, but after that, you should be able to go straight in.

--Storm
Zaurus SL-5500/Hentges OZ 3.5.4.1
Ambicom WL1100-CF wireless card
Desktop: Debian/GNU Linux (unstable)

grog

  • Hero Member
  • *****
  • Posts: 692
    • View Profile
    • http://
Ssh Host Key Verification Failed
« Reply #2 on: September 15, 2005, 07:09:36 am »
Quote
If you are sshing out from the Zaurus and its complaining about the host key failing, then the host key on the remote box doesn't match the one on record in your (Zaurus) user's .ssh/known_hosts. This mechanism is to protect against man-in-the-middle (mitm) attacks.[div align=\"right\"][a href=\"index.php?act=findpost&pid=95880\"][{POST_SNAPBACK}][/a][/div]
Fixed. It wasn't that the remote box wasn't in my known_hosts, it was that I didn't have a known_hosts file at all! As soon as I created an empty one then ssh came up with the prompt to confirm the identity of the host & then added the id to the file. Now's alls well in Z town.

Thanks for the help Storm. havefun!
GROG!