On Monday 30 November 2009 15:29:16 Andrew Bennetts wrote: > Joke de Buhr wrote: > > On Sunday 29 November 2009 14:22:47 João Santana wrote: > > [...] > > > > joao@ubuntu-laptop:~/Bazaar$ bzr branch lp:bmicalc > > > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > > > @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ > > > @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ > > > IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! > > > Someone could be eavesdropping on you right now (man-in-the-middle > > > attack)! It is also possible that the RSA host key has just been > > > changed. The fingerprint for the RSA key sent by the remote host is > > > c7:5c:24:88:80:a3:b6:26:7a:5d:35:22:41:95:67:47. > > [...] > > > The ssh host key has changed on the remote side. you can get rid of the > > message the same way using ssh. Grab an editor, open the file > > /home/joao/.ssh/known_hosts, remove the first line, save. > > The host key for bazaar.launchpad.net has NOT changed! It (still) has a > fingerprint of 9d:38:3a:63:b1:d5:6f:c4:44:67:53:49:2e:ee:fc:89. > > So I would be heeding that warning, not ignoring it. Somehow it appears > that when João Santana connects SSH to bazaar.launchpad.net it is going > to the wrong host, possibly because of a mistake like a misconfigured > DNS server, possibly because of something malicious. But certainly > there is a problem, and it should not be ignored. > > -Andrew. I have highest respect to everybidt who qualifies to become one of the full time in developers of launchpad, bazaar or ubuntu and I would be inclined to heed their advice. So what I say here is merely to tell you about my personal experience with ssh. Two other "escape" clauses follow: * Until a few months back, I had used ssh only on my home network. * I have just returned from a medical visit to a geriatric clinic and my age is suitable to become a patient there, so sadly I would not trust my own advice on any matter. I had similar occurances with ssh when one PC talked to another on my home network. Why - I have no idea. Sure, the warning is correct and I did take notice of it. But instead of losing sleep over it, I did what the previous corresponded had suggested - edited the ".ssh" file and the problem seazed. Just how did one of the .ssh entries change, I have no idea... It remains a mystery to me. So whilst I agree with all dire warnings, I think that a "suck and see" approach is indicated. I confess that if the warning occurred to me with an external connection, I would (probably) press all the buttons with "panick" written on them. IHTH, OldAl. -- Algis Kabaila, MEngSc, PhD(Eng) http://akabaila.pcug.org.au/StructuralAnalysis.pdf
This is the launchpad-users mailing list archive — see also the general help for Launchpad.net mailing lists.
(Formatted by MHonArc.)