Page MenuHomePhabricator

Cannot SSH to stat1004
Closed, ResolvedPublic

Description

I cannot login to stat1004 anymore:

goransm@mymachine:~$ ssh -o ServerAliveInterval=120 stat1004.eqiad.wmnet
Enter passphrase for key '/home/goransm/.ssh/wikiprod': 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
[SHA256: something]
Please contact your system administrator.
Add correct host key in /home/goransm/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /home/goransm/.ssh/known_hosts:21
  remove with:
  ssh-keygen -f "/home/goransm/.ssh/known_hosts" -R "stat1004.eqiad.wmnet"
ECDSA host key for stat1004.eqiad.wmnet has changed and you have requested strict checking.
Host key verification failed.

I do remember that there were some changes (Debian upgrade? - not sure) on stat1004 recently.
However, I have a crontab on stat1004 running very important WDCM operations that will be affected by T144010, and I need to be able to login there as soon as possible.

Related Objects

Event Timeline

When did you last use it?

Debian GNU/Linux 9 auto-installed on Tue May 22 15:58:49 UTC 2018.

Just remove the old key with the command it told you to use

ssh-keygen -f "/home/goransm/.ssh/known_hosts" -R "stat1004.eqiad.wmnet"

@Reedy Thanks - all is fine now.

I do not use stat1004 often at all - there is only one of my scripts running there, everything else is on stat1005.