From owner-freebsd-stable@FreeBSD.ORG  Wed Mar 31 13:49:16 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5BEC716A4CE
	for <freebsd-stable@freebsd.org>;
	Wed, 31 Mar 2004 13:49:16 -0800 (PST)
Received: from gilmore.nas.nasa.gov (gilmore.nas.nasa.gov [129.99.33.42])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4B00843D2D
	for <freebsd-stable@freebsd.org>;
	Wed, 31 Mar 2004 13:49:16 -0800 (PST)
	(envelope-from tweten@nas.nasa.gov)
Received: from gilmore.nas.nasa.gov
	(IDENT:9mMvI/q5nBxVBPy+pODMe34Pv448MuOd@localhost.nas.nasa.gov [127.0.0.1])
	i2VLnC3W003459;	Wed, 31 Mar 2004 13:49:12 -0800 (PST)
	(envelope-from tweten@gilmore.nas.nasa.gov)
X-Mailer: exmh version 2.6.3 04/04/2003 with nmh-1.0.4
To: Daren Desjardins <desjardins@canada.com>
From: Dave Tweten <tweten@nas.nasa.gov>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 31 Mar 2004 13:49:11 -0800
Message-ID: <3458.1080769751@gilmore.nas.nasa.gov>
Sender: tweten@nas.nasa.gov
cc: freebsd-stable@freebsd.org
Subject: Re: SSH issues with 4.9 stable (key_verify failed for 
 server_host_key)
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: David.E.Tweten@nasa.gov
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Mar 2004 21:49:16 -0000

desjardins@canada.com said:
>debug1: ssh_dss_verify: signature incorrect
>key_verify failed for server_host_key 

You may be suffering from the confusion I mentioned in my prevoious 
message -- if daren.ca's public key has changed since you began trying to 
make SSH work.

Get rid of /root/.ssh/known_hosts.  If it's valuable, rename it.  
Otherwise just delete it.  Now when you use the option I suggested in my 
previous message, SSH will ask you the question.  After you answer yes, it 
will store daren.ca's current public machine key in /root/.ssh/known_hosts.

Incidently, if you use my sshd_config file, you won't be able to log in 
interactively as root.
-- 
M/S 258-5                    |1024-bit PGP fingerprint:|tweten@nas.nasa.gov
NASA Ames Research Center    | 41 B0 89 0A  8F 94 6C 59|     (650) 604-4416
Moffett Field, CA  94035-1000| 7C 80 10 20  25 C7 2F E6|FAX: (650) 604-4377
Not an official NASA position.  You can't even be certain who sent this!