[K12OSN] should I be worried about this?

[Petre Scheie]

In spite what some others have said, I wouldn't panic just yet about the 
message.  I had a similar situation a few months ago, getting a similar message 
when connecting to one of my boxes.  I checked with a few buddies who know a lot 
more about this kind of stuff than I do.  Here's one of the replies I got:

--snip--

Did you have occasion to reboot the server?
I have noticed the generation of new SSH keys during reboot.
I have also noticed that some distros are configured to automatically
replace the SSHD key periodically.

ssh_host_rsa_key is a PEM containing the private key
ssh_host_rsa_key.pub contains one line of the form: ssh-rsa
PublicKeyValueInBase64

To show the fingerprint use: ssh-keygen -l -f ssh_host_rsa_key.pub

--snip--

In my case, the problem was related to going to a different machine behind a 
firewall but at the same IP address as another box for which I already had a key.

Not to say that you don't have a problem.  As others have said, you should check 
into it, but considering you just rebooted the box, I wouldn't be surprised if 
you find nothing unusual.

Petre

Carl Keil wrote:
> I get this when I try to ssh into my k12ltsp server.
> It just started happening after I rebooted last night.
> 
> [root at girlwhocouldfly root]# ssh 69.30.69.155
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now (man-in-the-middle attack)!
> It is also possible that the RSA host key has just been changed.
> The fingerprint for the RSA key sent by the remote host is
> 77:09:0d:18:02:84:dd:ed:53:c6:93:df:5a:c9:0c:ca.
> Please contact your system administrator.
> Add correct host key in /root/.ssh/known_hosts to get rid of this message.
> Offending key in /root/.ssh/known_hosts:2
> RSA host key for 69.30.69.155 has changed and you have requested strict
> checking.
> Host key verification failed.
> 
> 
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>