SSH automatic login error

[sheevm]

Hi All,

We are able to ssh in, but when we attempt to load certificiates and automatically log in, we are denied and given a 'man-in-the-middle' error.

Does anyone know what this error mean?

Thanks
Rajim

[IT_2007]

remove entry in ~/.ssh/known_hosts for the server name to login.

[sheevm]

Can you please tell me where this file is located? Is this a variable in SSHD_CONFIG file? or is this a separate file?

You really save my day in life if this fixes the problem.

Thanks a million

Rajim

[Jonathan Fife]

To follow up on IT_2007's post --

Basically the man-in-the-middle is an SSH attack where someone intercepts your login request and then forwards it onto the server using its own IP as the source, hoping to establish a secure communication with the server, and then to establish a second secure communication with the client using the data returned from the server. It could then de-encrypt all communications back and forth, and re-encrypt them when it forwards them on to the intended destination. Neither the host nor the client would know that someone was de-encrypting and re-encrypting the data mid-stream.

Your server thinks someone is trying to pull this attack and thus denies the attempted login. The file is located in $HOME/.ssh/ for whatever user is logging in.

[Steven E. Protter]

Shalom,

ssh is smart, stores info in /home/.ssh/known_hosts

If it sees a key change or something similar it squawks for good reason.

Remove the offending entry which is often referred to by line number.

SEP

[sheevm]

Hi,

This solution seems to eliminate the "Middle man attack" error. But it keeps prompting for password. What is the way to make it work to automatically login without password?

Thanks.
Rajim

[IT_2007]

copy id_dsa.pub key to authorized_keys file and copy to the destination server at user home directory/.ssh directory.