IBM Support

How to resolve the ssh issue of "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED"

Troubleshooting


Problem

How to resolve the ssh issue of "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED"

Symptom

 [root@hn1 ~]# ssh cn053
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle
attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
f0:a8:84:29:de:39:31:7e:90:02:91:3b:06:a8:25:3c.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this
message.
Offending RSA key in /root/.ssh/known_hosts:132
Password authentication is disabled to avoid man-in-the-middle
attacks.
Keyboard-interactive authentication is disabled to avoid
man-in-the-middle attacks.
Last login: Sat May 26 19:09:38 2018 from hn1

Cause

The cause for the issue is that the host key for some net interface have changed, all the host keys for the target compute node need be renewed.

Resolving The Problem

Remove all the item of the issue compute node, including the bmc and all net interface. Below is a sample, the second item is for BMC network port.
cn053,10.1.1.54 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoxu3NTdkv72syp3ZSsLx2SK9dCbIh34AXLUo8FDU8FKhdPCGQaKvWBN5IodYJ+/2xGoCphLelE82IQShGJfeZXUaTU8x8z9ZPRWMJaeQgtDYVEgk1MQlw633yOlly/eC1n86k8AGltBN5hKrbIE7EW4s/P1nBMPqDpMEthIdIfr6JCi23/LKHbTRC3ZcDEnG90KefEnm4NmveAhbXMn5a8L2uXkSCbWNLCM2FfcfXJJA769Mf0sYBGjd0ex503M7aKgYgXGPIsKwwCwfwQ92xdM/DzBIe2okC6LR4IIiVTWFdQ8G6i9q7LBNlHlUafrUmV+udgFYdWJMLBQHBL99JQ==
10.1.3.54 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2BGK6quL2Rp4/XgSSWPlZNXwqnHHdZVfJvdxCiGOQXBnUqvybF+fXHZoaBx0+eT4mzjMFZG/CGikSpZR8GsLlaULtv5vR8NAcBFlHgSP1UnNN93J5cBYGsymD/G+YKetkzqdIePADt1qAUpHAXuIxQy16TnRb3kTOV5yXmkAk4jZYjsxkn3BXhC2i/mPm261cyulf0fC6OWD2Hu5/hBFnbrBUem85yTTJemmxGCT9IdT9nkazm0AL50rOUfhp/hUiSMYrpqFsE3iRlwhYNAVKMYcCTKgti/cwpSFgg0sqc/QP87KgQf0+69231dbBYEooWllm6E74Z7CN5cn9sj9Nw==

After removing all the related item, the ssh function with passwordless works well.

[{"Product":{"code":"SSENRW","label":"Platform HPC for System x"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Head Node","Platform":[{"code":"PF016","label":"Linux"}],"Version":"4.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

More support for:
Platform HPC for System x

Software version:
4.2

Operating system(s):
Linux

Document number:
665293

Modified date:
17 June 2018

UID

isg3T1027802