linux - 为什么 SSH 会反复显示此消息？

Question

已关闭。此问题不符合 Stack Overflow guidelines 。目前不接受答案。

---

这个问题似乎不是关于 a specific programming problem, a software algorithm, or software tools primarily used by programmers 。如果您认为这个问题与 another Stack Exchange site 上的主题有关，您可以发表评论来解释问题可能在哪里得到解答。

已关闭 8 年前。

Improve this question

嗨，过去几周我一直在家里使用 SSH 协议(protocol)连接到我的电脑。今天，当我想连接到我的电脑时，它显示了以下消息:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the DSA key sent by the remote host is
e4:e2:ac:f0:d1:1b:72:56:f0:47:4a:68:95:54:e1:a3.
Please contact your system administrator.
Add correct host key in /home/dimit/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /home/dimit/.ssh/known_hosts:1
  remove with: ssh-keygen -f "/home/dimit/.ssh/known_hosts" -R 10.136.18.76
DSA host key for 10.136.18.76 has changed and you have requested strict checking.
Host key verification failed.

通过互联网搜索，我意识到这是 SSH 的常见问题，因此我尝试根据建议的解决方案来解决它，例如:

ssh-keygen -R hostname

or

rm .ssh/known_hosts 

....

所以在完成这些解决方案后，消息消失了。但是当我被要求输入密码并且我输入时，它告诉我密码错误!我尝试了所有的解决方案，但没有一个对我有用。我使用 -v 选项运行 SSH，输出如下:

dimit@dimit-GE620-GE620DX-FX620DX:~$ ssh -v ivan@10.136.18.76
OpenSSH_5.9p1 Debian-5ubuntu1.4, OpenSSL 1.0.1 14 Mar 2012
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to 10.136.18.76 [10.136.18.76] port 22.
debug1: Connection established.
debug1: identity file /home/dimit/.ssh/id_rsa type -1
debug1: identity file /home/dimit/.ssh/id_rsa-cert type -1
debug1: identity file /home/dimit/.ssh/id_dsa type -1
debug1: identity file /home/dimit/.ssh/id_dsa-cert type -1
debug1: identity file /home/dimit/.ssh/id_ecdsa type -1
debug1: identity file /home/dimit/.ssh/id_ecdsa-cert type -1
debug1: Remote protocol version 2.0, remote software version dropbear_0.51
debug1: no match: dropbear_0.51
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: sending SSH2_MSG_KEXDH_INIT
debug1: expecting SSH2_MSG_KEXDH_REPLY
debug1: Server host key: DSA e4:e2:ac:f0:d1:1b:72:56:f0:47:4a:68:95:54:e1:a3
debug1: Host '10.136.18.76' is known and matches the DSA host key.
debug1: Found key in /home/dimit/.ssh/known_hosts:1
debug1: ssh_dss_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Trying private key: /home/dimit/.ssh/id_rsa
debug1: Trying private key: /home/dimit/.ssh/id_dsa
debug1: Trying private key: /home/dimit/.ssh/id_ecdsa
debug1: Next authentication method: password
ivan@10.136.18.76's password: 
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.
ivan@10.136.18.76's password: 
Mdebug1: Authentications that can continue: publickey,password
Permission denied, please try again.
ivan@10.136.18.76's password: 
debug1: Authentications that can continue: publickey,password
debug1: No more authentication methods to try.
Permission denied (publickey,password).
dimit@dimit-GE620-GE620DX-FX620DX:~$ 

我以为一定是有人更改了密码!所以我今天去了我的办公室，当我将笔记本电脑连接到我的电脑时，它也显示了第一条消息，但唯一的区别是上述所有解决方案都适用于我，并且在那里我能够使用旧密码连接到我的电脑!!!

我以为问题已经解决了，但是当我回到家时，当我删除known_hosts文件时，第一条消息仍然出现，它告诉我密码错误，我确信它不是错误的!!!!

看来我可以连接到办公室的电脑，但不能连接到家里的电脑!我确信办公室和我家都没有进行网络修改。但我还是不知道该怎么办!过去几周我没有遇到这个问题!

Answer 1

我建议您从家里连接的 IP 地址(现在)是错误的。

您运行了 ssh 命令，它告诉您问题:您正在连接到另一台计算机。您忽略了该建议并删除了机器的 ssh 信息，然后连接并告诉另一台机器您的密码。

然后你在工作中连接，它(可能)连接到了正确的机器(但 ssh 认为这是错误的)，你让 ssh 再次忘记并且它工作了。

你应该:

1. 修复您要连接的 IP 地址(也许 DHCP 在外部发生更改？)。
2. 更改您的密码，因为您已将其提供给某个未知服务器。