Restarting changes host identification?

41 views
Skip to first unread message

Yenkaykay

unread,
Sep 18, 2019, 10:56:09 AM9/18/19
to Alt-F

I have Alt F on a DNS 323(with dropbear for SSH).

ssh into DNS 323 (without keys) work fine after copying the public key from a PI. 

Once the DNS 323 is restarted, I can't do scp and get the below error : 
----------------------------------------------------
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)! ......
------------------------------------------------------

What I mean is everytime I restart the DNS 323, I have to do ssh-keygen and ssh-copy-id from the server which connects to the DNS 323. 
Is it a problem with Dropbear or something to do with ALT-F ?

João Cardoso

unread,
Sep 22, 2019, 2:24:10 PM9/22/19
to al...@googlegroups.com
Are you doing the scp to a normal Alt-F user or to the root user?
Under Alt-F the root user home folder, '/root' is in RAM memory, is volatile, so the user keys will be lost upon a reboot, while a normal user keys are on disk, persistent. For the root user you will need to use the "user boot" script Services->User,user,Configure, and edit the "Script to execute on powerup:"; e.g., after the 'start)' line I add 'cp -a /mnt/sda4/.ssh /root'.

The host id keys are also stored on RAM memory, so you have to "save settings" to store them in flash memory; on reboot the flash memory saved settings are copied to the right place, but if "settings" don't exists on flash new host keys are generated.
A red warning "When done you must save settings " appears in the webUI whenever any flash saved files are changed; keep the mouse still on the warning to see what files have changed, and click the warning to go to the "save settings" webUI page.




Kiruthik Kumar

unread,
Sep 23, 2019, 8:33:45 AM9/23/19
to al...@googlegroups.com
thank you! I'm using scp with the root user. I will change it to a different user then! Thanks again!! 



On Sun, Sep 22, 2019 at 2:24 PM João Cardoso <whoami...@gmail.com> wrote:


On Wednesday, 18 September 2019 15:56:09 UTC+1, Yenkaykay wrote:

I have Alt F on a DNS 323(with dropbear for SSH).

ssh into DNS 323 (without keys) work fine after copying the public key from a PI. 

Once the DNS 323 is restarted, I can't do scp and get the below error : 
----------------------------------------------------
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)! ......
------------------------------------------------------

What I mean is everytime I restart the DNS 323, I have to do ssh-keygen and ssh-copy-id from the server which connects to the DNS 323. 
Is it a problem with Dropbear or something to do with ALT-F ?

Are you doing the scp to a normal Alt-F user or to the root user?
Under Alt-F the root user home folder, '/root' is in RAM memory, is volatile, so the user keys will be lost upon a reboot, while a normal user keys are on disk, persistent. For the root user you will need to use the "user boot" script Services->User,user,Configure, and edit the "Script to execute on powerup:"; e.g., after the 'start)' line I add 'cp -a /mnt/sda4/.ssh /root'.

The host id keys are also stored on RAM memory, so you have to "save settings" to store them in flash memory; on reboot the flash memory saved settings are copied to the right place, but if "settings" don't exists on flash new host keys are generated.




--
You received this message because you are subscribed to the Google Groups "Alt-F" group.
To unsubscribe from this group and stop receiving emails from it, send an email to alt-f+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/alt-f/aea2cf7b-9c1a-49a0-badc-7066686f591c%40googlegroups.com.


--


- Regards,
KK


Reply all
Reply to author
Forward
0 new messages