The UNIX and Linux Forums  
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.

Go Back   The UNIX and Linux Forums > Special Forums > Security
.
google unix.com



Security Discuss UNIX and Linux computer and network security, cybersecurity, cyberattacks, IT security, CISSP, OWASP and more.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Microsoft Security Advisory (922437): Exploit Code Published Affecting the Server Ser iBot Security Advisories (RSS) - Microsoft 0 12-24-2007 10:00 AM
code to FTP the spool file from Sqlplus to the unix server. vprevin Shell Programming and Scripting 0 10-31-2007 02:48 AM
how i prepare a c++ code(c code) for implementing my own protocol format amitpansuria High Level Programming 1 09-06-2007 11:09 PM
Hiding PHP code on the server sudhir_onweb Shell Programming and Scripting 4 04-13-2007 10:53 AM
server based Including additional code > Lycos way valentijnb UNIX for Dummies Questions & Answers 1 07-05-2003 06:54 PM

Closed Thread
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish Powered by Powered by Google
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
  #1 (permalink)  
Old 04-10-2006
Texan Texan is offline
Registered User
  
 

Join Date: Aug 2005
Location: Earth
Posts: 8
Question SSH key code versus server key code

Hi,

When logging in using SSH access (to a remotely
hosted account), I received a prompt to accept
a server's key fingerprint. Wrote that string
of code down for comparision.

Already emailed my host for their listing of the
string of code for the server's key fingerprint
(for comparison, verification and security).
Tech rep responds:
1. 'just click Accept';
2. later, 'don't know why you want to know'.

I've tried the addresses of
https:// ip number :2083/
https:// ip number :2096/
https:// ip number /~username/
but the certificate shows no code string
within any of the listings like the SSH
access prompt's code string.

I may simply be looking in the wrong places.
Where can we find the listing of the server
key fingerprint please?
  #2 (permalink)  
Old 04-12-2006
x96riley3 x96riley3 is offline
Registered User
  
 

Join Date: Mar 2006
Location: Nashville
Posts: 79
I think most people are not following what you need.

When you log into the remote server you are accepting the servers host key. This is done the first time you go there. The next time you go there, ssh will check to make sure the host key you accepted the first time is still the same host key. If it's not you will get a man-in-the-middle error. This says, "Hey, your host key doesn't match what I have for a host key. Either I somehow have a new host key or someone is trying to become the target server." If you trust the server, you accept the new host key which is stored locally for you. Once this has taken place you should be prompted to enter your passphrase.

Host keys are used to identify servers. Why? Cause someone could be performing a DOS attack against the real server. There could be IP spoofing of some sort going on. This helps prevent that.

Hope this helps.

-X
Sponsored Links
Closed Thread

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 07:29 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language Translations Powered by .
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0