Activity log for bug #51169

Date Who What changed Old value New value Message
2006-06-28 05:57:22 Evan Carroll bug added bug
2006-06-28 06:02:38 Evan Carroll description In the event you get files by using an ssh://username@computer URI, you will find that if the ssh key changes on the remote machine, rather than giving the user the typcical console caveat about the man-in-the-middle attack, it fails, claiming: --START DIALOG BOX Nautilus cannot display "ssh://[uri location]" Please select another viewer and try again. --END DIALOG BOX A remedy is of coarse to delete the coresponding ~/.ssh/known_hosts file, but the dialog box should be more informative of the error at hand. The typical console caveat is include for reference: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed. The fingerprint for the RSA key sent by the remote host is ff:bd:00:27:27:db:f8:4a:6d:2f:cf:25:ef:15:07:df. Please contact your system administrator. Add correct host key in /home/ecarroll/.ssh/known_hosts to get rid of this message. Offending key in /home/ecarroll/.ssh/known_hosts:1 RSA host key for 192.168.0.105 has changed and you have requested strict checking. Host key verification failed. In the event you get files by using an ssh://username@computer URI, you will find that if the servers rsa key changes on the remote machine, rather than giving the user the typical console caveat about the man-in-the-middle attack, it fails, claiming: The rsa key easily change, as in the event of a live cd lab, in which they are constantly in flux. --START DIALOG BOX Nautilus cannot display "ssh://[uri location]" Please select another viewer and try again. --END DIALOG BOX A remedy is of coarse to delete the coresponding ~/.ssh/known_hosts file, but the dialog box should be more informative of the error at hand. The typical console caveat is include for reference: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed. The fingerprint for the RSA key sent by the remote host is ff:bd:00:27:27:db:f8:4a:6d:2f:cf:25:ef:15:07:df. Please contact your system administrator. Add correct host key in /home/ecarroll/.ssh/known_hosts to get rid of this message. Offending key in /home/ecarroll/.ssh/known_hosts:1 RSA host key for 192.168.0.105 has changed and you have requested strict checking. Host key verification failed.
2006-06-28 10:18:27 William Grant marked as duplicate 41738
2006-06-28 10:20:26 William Grant nautilus: status Unconfirmed Rejected
2006-06-28 10:20:26 William Grant nautilus: statusexplanation Thanks for the bug report, but this is the same as bug #41738.