From owner-freebsd-security Thu Mar 1 0:19: 7 2001 Delivered-To: freebsd-security@freebsd.org Received: from gilberto.physik.rwth-aachen.de (gilberto.physik.rwth-aachen.de [137.226.30.2]) by hub.freebsd.org (Postfix) with ESMTP id B529337B719 for ; Thu, 1 Mar 2001 00:19:01 -0800 (PST) (envelope-from kuku@gilberto.physik.rwth-aachen.de) Received: (from kuku@localhost) by gilberto.physik.rwth-aachen.de (8.9.3/8.9.3) id JAA82842 for freebsd-security@freebsd.org; Thu, 1 Mar 2001 09:19:00 +0100 (CET) (envelope-from kuku) Date: Thu, 1 Mar 2001 09:19:00 +0100 (CET) From: Christoph Kukulies Message-Id: <200103010819.JAA82842@gilberto.physik.rwth-aachen.de> To: freebsd-security@freebsd.org Subject: sshd - @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I installed a newer sshd recently on one machine in the network which I used to login before already via ssh. Now I'm getting this infamous @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the host key has just been changed. Please contact your system administrator. Add correct host key in /home/user/.ssh/known_hosts to get rid of this message. Host key for host.domain has changed and you have requested strict checking. Do I have to worry about being compromised or is it 'normal' behaviour? -- Chris Christoph P. U. Kukulies kuku@gil.physik.rwth-aachen.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message