Hoe Host key verification van SSH uitschakelen

[-= [ Appien ] =-]

Ik heb 3 ssh servers op 1 adsl draaien, maar omdat de DSA host key anders, blijft SSH deze waarschuwing geven :

 

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that the DSA host key has just been changed.

The fingerprint for the DSA key sent by the remote host is

c0:b0:d9:d4:6c:bb:48:fa:e2:79:1e:3e:e8:94:d7:b7.

Please contact your system administrator.

Add correct host key in /root/.ssh/known_hosts to get rid of this message.

Offending key in /root/.ssh/known_hosts:1

DSA host key for xxx.xxx.xxx.xxx has changed and you have requested strict checking.

Host key verification failed.

 

 

Nu had ik in /etc/ssh/ssh_config :

 

CheckHostIP : If this flag is set to âyesâknown_hosts file. This allows ssh to detect if a host key changed due to DNS spoofing. If the option is set to ânoâyesâ.

 

Maar als ik die uitschakel blijft hij de melding geven.

[-= [ Appien ] =-]

handmatig de host keys in de known_hosts zetten werkt wel.

[Candymirror]

of om type werk te besparen de regel met de betreffende host geheel verwijderen uit .ssh/known_hosts