Ik heb vandaag mijn et10000 opnieuw geflasht met de vers gedownloade image van 26-11.
Daarbij doet zich een vreemd iets voor dat zou kunnen lijken op een hack... Maar ik weet niet het fijne ervab.
De verschijnselen en de log ervan:
Ik flash de et10000 met een autoinstall... Daarna log ik me ssh van mijn ubuntu laptop aan, en krijg ik een waarshuwing over een veranderde key van de et10000.
Die pas ik aan op mijn laptop.
Als ik dan echter de et10000 reboot en daarna aanlog vanaf mijn laptop, krijg ik weer die melding... Host key veranderd.
En dat zou ik dan weer niet verwachten, dat de host key weer is aagpast. Kan dat door mjn autoinstall komen, of is hier echt iets aan de hand?
xxxxxxxxxxxx:~$ 1
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
Please contact your system administrator.
Add correct host key in /home/<usr>/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/<usr>/.ssh/known_hosts:38
remove with:
ssh-keygen -f "/home/<usr>/.ssh/known_hosts" -R "xxxxxxxxxxxxxx"
RSA host key for xxxxxxxxxxxxxx has changed and you have requested strict checking.
Host key verification failed.
xxxxxxxxxxxx:~$ vi .ssh/known_hosts
xxxxxxxxxxxx:~$ 1
The authenticity of host 'xxxxxxxxxxxxxx (xxxxxxxxxxxxxx)' can't be established.
RSA key fingerprint is SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'xxxxxxxxxxxxxx' (RSA) to the list of known hosts.
xxxx@et10000 > Connection to xxxxxxxxxxxxxx closed.
xxx@xxxxxxxx:~$ 1
xxxx@et10000 > reboot
Broadcast message from xxxx@et10000 (pts/0) (Thu Nov 29 16:07:41 2018):
The system is going down for reboot NOW!
xxxx@et10000 > packet_write_wait: Connection to 192.168.178.10 port 22: Broken pipe
xxx@xxxxxxxx:~$
xxx@xxxxxxxx:~$ 1
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
Please contact your system administrator.
Add correct host key in /home/<usr>/.ssh/known_hosts to get rid of this message.
Offending RSA key in /home/<usr>/.ssh/known_hosts:38
remove with:
ssh-keygen -f "/home/<usr>/.ssh/known_hosts" -R "xxxxxxxxxxxxxx"
RSA host key for xxxxxxxxxxxxxx has changed and you have requested strict checking.
Host key verification failed.
xxxxxxxxxxxx:~$ vi .ssh/known_hosts
xxxxxxxxxxxx:~$ 1
The authenticity of host 'xxxxxxxxxxxxxx (xxxxxxxxxxxxxx)' can't be established.
RSA key fingerprint is SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'xxxxxxxxxxxxxx' (RSA) to the list of known hosts.
xxxx@et10000 > reboot
Broadcast message from xxxx@et10000 (pts/0) (Thu Nov 29 16:09:27 2018):
The system is going down for reboot NOW!
xxxx@et10000 > packet_write_wait: Connection to xxxxxxxxxxxxxx port 22: Broken pipe
xxx@xxxxxxxx:~$ 1
xxxx@et10000 >
