Hey Jon,

In this case, everything is fine. bast1001 underwent some maintenance recently and its keys changed; take a look at the ops mailing list for more details. You can use something like this command (if you're on a Mac) to remove the old keys:

ssh-keygen -f "/Users/yourusername/.ssh/known_hosts" -R bast1001.wikimedia.org

Dan


On 18 April 2016 at 17:11, Jon Katz <jkatz@wikimedia.org> wrote:
Hey Folks,
I am suddenly having trouble logging into stat1002 or stat1003 using my normal settings.  Here is what I get:

Jon-Katzs-Air:~ jkatz$  ssh jkatz@stat1003.eqiad.wmnet

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that a host key has just been changed.

The fingerprint for the RSA key sent by the remote host is

[REDACTED BY JK].

Please contact your system administrator.

Add correct host key in /Users/jkatz/.ssh/known_hosts to get rid of this message.

Offending RSA key in /Users/jkatz/.ssh/known_hosts:1

RSA host key for bast1001.wikimedia.org has changed and you have requested strict checking.

Host key verification failed.

ssh_exchange_identification: Connection closed by remote host


  Here is my host.config file:

ForwardAgent no


     ProxyCommand ssh -a -W %h:%p bast1001.wikimedia.org


Is someone doing something nasty?

Any ideas?


Thanks,


J


_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics




--
Dan Garry
Lead Product Manager, Discovery
Wikimedia Foundation