Differences

This shows you the differences between two versions of the page.

--- ssh [2009/07/30 09:05]
greebo
+++ ssh [2016/08/04 09:37] (current)
zagi [other SSH stuff]
@@ Line 38: / Line 38: @@
 done
 </code>
+===== How to Fix Offering key in ~/.ssh/known_hosts =====
+# ssh -o 'StrictHostKeyChecking no' user@host
+==== Remove the offending ssh key ====
+<code>
+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
+Someone could be eavesdropping on you right now (man-in-the-middle attack)!
+It is also possible that the RSA host key has just been changed.
+The fingerprint for the RSA key sent by the remote host is
+a7:a8:f2:97:94:33:58:b7:9d:bc:e0:a6:6b:f7:0a:29.
+Please contact your system administrator.
+Add correct host key in /home/ramesh/.ssh/known_hosts to get rid of this message.
+Offending key in /home/ramesh/.ssh/known_hosts: 6
+Permission denied (publickey,password).
+</code>
+   # sed -i '6d' ~/.ssh/known_hosts
+<note important>**Note**: Change the **6d** according to the line number shown.</note>
+**Perl solution**:
+   # perl -pi -e 's/\Q$_// if ($. == 6);' ~/.ssh/known_hosts
 ====== How to harden your sshd ======
@@ Line 138: / Line 165: @@
       action = %(action_mw)s\\
+===== other SSH stuff ======
+use EF DSCP in ssh:
+  ~/.ssh/config
+  IPQoS ef
+use jump host
+  ~/.ssh/config
+  Host finalhost
+  HostName finalhost
+  User userfinal
+  ProxyCommand ssh proxyuser@proxyhost nc %h %p
+then one can simply type
+  ssh finalhost
+to ssh via proxyhost to final destination host
+using same options for multiple hosts in same domain
+   Host switch* router* myrouter* cmts*
+no need to type FQDN for switch-somethingsomething