Offending RSA key when we do bosh ssh


ramonskie
 

when i do "bosh ssh"
and select a job i get the error below
the strange is this does not happen with all of them

i tried updating the bosh gem to BOSH 1.3184.1.0
but no success
i use the following stemcell: 3147

===========================================
Starting interactive shell on job loggregator-trafficecontroller/0
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
37:eb:c2:b1:6b:ed:fb:ac:92:e0:2b:77:d9:f2:ae:05.
Please contact your system administrator.
Add correct host key in /home/vcap/.bosh/tmp/9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts to get rid of this message.
Offending RSA key in /home/vcap/.bosh/tmp/9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts:1
remove with: ssh-keygen -f "/home/vcap/.bosh/tmp/9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts" -R 172.21.28.17
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
Permission denied (publickey,password).

Cleaning up ssh artifacts
================================

a referring post maby https://lists.cloudfoundry.org/archives/list/cf-bosh(a)lists.cloudfoundry.org/thread/XGPNV3V5J7FPYMBE5RZEEQS4C6QZOQMZ/
i tried the option "bosh ssh --strict_host_key_checking no"

but no success


Ronak Banka
 

Remove the old key using : ssh-keygen -f "/home/vcap/.bosh/tmp/
9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts" -R 172.21.28.17
and then try again with "bosh ssh --strict_host_key_checking no"

On Tue, Feb 2, 2016 at 12:34 AM, Ramon Makkelie <ramon.makkelie(a)klm.com>
wrote:

when i do "bosh ssh"
and select a job i get the error below
the strange is this does not happen with all of them

i tried updating the bosh gem to BOSH 1.3184.1.0
but no success
i use the following stemcell: 3147

===========================================
Starting interactive shell on job loggregator-trafficecontroller/0
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
37:eb:c2:b1:6b:ed:fb:ac:92:e0:2b:77:d9:f2:ae:05.
Please contact your system administrator.
Add correct host key in
/home/vcap/.bosh/tmp/9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts to
get rid of this message.
Offending RSA key in
/home/vcap/.bosh/tmp/9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts:1
remove with: ssh-keygen -f
"/home/vcap/.bosh/tmp/9ca7fd9f-dcf5-4739-98de-b4f4f607ad28_known_hosts" -R
172.21.28.17
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle
attacks.
Permission denied (publickey,password).

Cleaning up ssh artifacts
================================

a referring post maby
https://lists.cloudfoundry.org/archives/list/cf-bosh(a)lists.cloudfoundry.org/thread/XGPNV3V5J7FPYMBE5RZEEQS4C6QZOQMZ/
i tried the option "bosh ssh --strict_host_key_checking no"

but no success


ramonskie
 

i already checked that ofcourse
and there are no files located in /home/vcap/.bosh/tmp


Tushar Dadlani
 

Can you also provide information about what version of the bosh director
are you running ?

On Feb 2, 2016 3:14 PM, "Ramon Makkelie" <ramon.makkelie(a)klm.com> wrote:

i already checked that ofcourse
and there are no files located in /home/vcap/.bosh/tmp


ramonskie
 

bosh status info

Director
Name microbosh-openstack
URL https://172.21.42.148:25555
Version 1.3147.0 (00000000)
User test
UUID 1a14da86-ea9b-4e56-9831-362151952889
CPI openstack
dns enabled (domain_name: microbosh)
compiled_package_cache disabled
snapshots disabled


Ronak Banka
 

Hi Ramon,

Are you able to locate your .bosh directory ??

Usually it is created in same directory where .bosh_config file is created.

config path for .bosh_config should be there on output of bosh status .

Thanks
Ronak



--
View this message in context: http://cf-bosh.70367.x6.nabble.com/cf-bosh-Offending-RSA-key-when-we-do-bosh-ssh-tp1284p1289.html
Sent from the CF BOSH mailing list archive at Nabble.com.


ramonskie
 

yes bosh_config is in my vcap home_dir
and
.bosh/
.bosh/cache/ < filled with allot of blobs
.bosh/tmp/ < empty


Ronak Banka
 

Ramon can you check the know_hosts file in .ssh dir of your home dir .



--
View this message in context: http://cf-bosh.70367.x6.nabble.com/cf-bosh-Offending-RSA-key-when-we-do-bosh-ssh-tp1284p1297.html
Sent from the CF BOSH mailing list archive at Nabble.com.


ramonskie
 

i do not have a know_host file
because i have the following in my config

Host *
StrictHostKeyChecking no
UserKnownHostsFile=/dev/null


ramonskie
 

i have installed the bosh cli on a new/clean vm
and still the same issue.

i'm really out of idea's