Hi to all,
Yep, that was it. The CE key changed.
Thanks again everyone!
-MS
On Fri, 2004-10-15 at 03:56, Eduardo Huedo Cuesta wrote:
> It appears that /opt/edg/sbin/edg-pbs-knownhosts only adds new keys
> and doesn't delete the old ones (the offending keys).
> Try removing /etc/ssh/ssh_known_hosts and running
> /opt/edg/sbin/edg-pbs-knownhosts manually.
>
> LHC Computer Grid - Rollout wrote:
> > On Thu, 14 Oct 2004, Maniel Sotomayor wrote:
> >
> >
> > > > That seems to be the problem... this is what i did.
> > > > 1. ssh root@<WN>
> > > > 2. su - dteam001
> > > > 3. ssh <CE>
> > > >
> > > [dteam001@bh-wn0 dteam001]$ ssh ce.prd.hp.com
> > > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
> > > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> > > IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> > > Someone could be eavesdropping on you right now (man-in-the-middle
> > > attack)!
> > > It is also possible that the RSA host key has just been changed.
> > > The fingerprint for the RSA key sent by the remote host is
> > > 14:38:e9:0c:1a:25:07:e8:70:91:02:d6:4f:3a:be:ce.
> > > Please contact your system administrator.
> > > Add correct host key in /home/dteam001/.ssh/known_hosts to get rid of
> > > this message.
> > > Offending key in /etc/ssh/ssh_known_hosts:2
> > > RSA host key for ce.prd.hp.com has changed and you have requested strict
> > > checking.
> > > Host key verification failed.
> > > [dteam001@bh-wn0 dteam001]$
> > >
> > The problem is, that in /etc/ssh/ssh_known_hosts is a key associated with
> > CE, that is no longer valid (have you reinstalled CE, or why did the key
> > change? It might be wroth inspecting, from the security point of view).
> > However, the keys in this file should be automatically generated by
> > /opt/edg/sbin/edg-pbs-knownhosts script. Try running it manually and if
> > this helps, look for the reason why it is not run by cron (you should have
> > line resembling
> >
> > 03 1,7,13,19 * * * /opt/edg/sbin/edg-pbs-knownhosts
> >
> > in your crontab).
> >
> > --
> > Jiri Kosina
> > Institute of Physics, Academy of sciences of the Czech Republic
> >
> >
> >
>
> --
> **************************************************
>
> Eduardo Huedo Cuesta
> Laboratorio de Computación Avanzada, Simulación
> y Aplicaciones Telemáticas
> Centro de Astrobiología (CSIC-INTA)
> Ctra. de Ajalvir Km 4
> 28850 Torrejón de Ardoz, Madrid
> Spain
>
> Tel: +34 91 520 64 28
> Fax: +34 91 520 10 74
> Email: [log in to unmask]
> Web: http://www.cab.inta.es/~huedoce
>
> **************************************************
|