09-26-2010
If you don't have another private key to compare with, then you'll need to re-generate you key pairs, but first, delete the .ssh folder in your ~. And probably generate a dsa keytype which supports ssh version 2 better
server2:/home/user1>ssh-keygen -t dsa
---------- Post updated at 09:54 AM ---------- Previous update was at 09:54 AM ----------
If you don't have another private key to compare with, then you'll need to re-generate you key pairs, but first, delete the .ssh folder in your ~. And probably generate a dsa keytype which supports ssh version 2 better
server2:/home/user1>ssh-keygen -t dsa
10 More Discussions You Might Find Interesting
1. IP Networking
Hi,
I am having a problem with our AIX 4.3.3 Server accessing FTP. The error is " Connection Closed By Remote Host".
Scenario:
Since i put a default gateway on the server FTP connection is having a problem but when i remove the default gateway it will works fine..
Is there any way not... (1 Reply)
Discussion started by: mouglybean
1 Replies
2. Shell Programming and Scripting
hi
i am trying to connect the frontend server using ssh
i got the following error
ssh_exchange_identification: Connection closed by remote host
can anyone help please (1 Reply)
Discussion started by: Satyak
1 Replies
3. Shell Programming and Scripting
I am using KSH and I need to check whether the remote host has been configured with ssh public key. Is there any way we can check inside a script? (6 Replies)
Discussion started by: praveenbvarrier
6 Replies
4. Linux
Dear All,
Recently our server has been giving the error:
"ssh_ exchange-identification: Connection closed by remote host"
The error causes the server to become in accessible via ssh and the services are stopped/hung. The server has to be restarted to make it working normal again.
The... (3 Replies)
Discussion started by: vguleria
3 Replies
5. UNIX for Dummies Questions & Answers
Hi Everyone,
Good day.
Scenario:
2 unix servers -- A (SunOS) and B (AIX)
I have an ftp script to sftp 30 files from A to B which happen almost instantaneously i.e 30 sftp's happen at the same time.
Some of these sftp's fail with the following error:
ssh_exchange_identification: Connection... (1 Reply)
Discussion started by: jeevan_fimare
1 Replies
6. Solaris
server is ok, I can login on console. however, when I use SSH teachia, there is no repsond.
i have check ps-ef | grep ssh, it shows ok. restart ssh too. still not working.
Anything else I need to check?
# ps -ef | grep ssh
root 24706 1 0 Jun 12 ? 0:00... (7 Replies)
Discussion started by: uuontario
7 Replies
7. UNIX for Advanced & Expert Users
Hi All,
When i try to do ssh from a linux to solaris box its throughing "Connection closed by remote host". Please not that this error is not occuring every time i do ssh, it occurs at random timing( Mostly ssh is successful) - unfortunately my script which is doing ssh is falling at this time... (4 Replies)
Discussion started by: pkumar7
4 Replies
8. Shell Programming and Scripting
Hi!
I have two solaris 10 machines(say 10.1.1.1,10.1.1.2). i have installed rsync on 10.1.1.2,
10.1.1.1:::
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
-bash-3.00$ ssh 10.1.1.2 "echo $PATH"
Password:... (4 Replies)
Discussion started by: dddkiran
4 Replies
9. HP-UX
I am trying to connect to my HP server from remote machine.
It gets connected but once credential are provided the connection is closed.
adroit:/home/seo/hitendra 32 ] telnet myserv1
Trying...
Connected to myserv1.
Escape character is '^]'.
Local flow control on
Telnet TERMINAL-SPEED... (4 Replies)
Discussion started by: hiten.r.chauhan
4 Replies
10. Shell Programming and Scripting
Hi All,
I have a basic question.
In my system i maintained multiple unix server, and only one server has public ip, and all the servers are behind load balancing BIG ip server.
To access any server, user need to access server with public IP then from there they can establish ssh connection to... (2 Replies)
Discussion started by: dilipsn
2 Replies
LEARN ABOUT OPENSOLARIS
ssh-keyscan
ssh-keyscan(1) User Commands ssh-keyscan(1)
NAME
ssh-keyscan - gather public ssh host keys of a number of hosts
SYNOPSIS
ssh-keyscan [-v46] [-p port] [-T timeout] [-t type]
[-f file] [-] [host... | addrlist namelist] [...]
DESCRIPTION
ssh-keyscan is a utility for gathering the public ssh host keys of a number of hosts. It was designed to aid in building and verifying
ssh_known_hosts files. ssh-keyscan provides a minimal interface suitable for use by shell and perl scripts. The output of ssh-keyscan is
directed to standard output.
ssh-keyscan uses non-blocking socket I/O to contact as many hosts as possible in parallel, so it is very efficient. The keys from a domain
of 1,000 hosts can be collected in tens of seconds, even when some of those hosts are down or do not run ssh. For scanning, one does not
need login access to the machines that are being scanned, nor does the scanning process involve any encryption.
File Format
Input format:
1.2.3.4,1.2.4.4
name.my.domain,name,n.my.domain,n,1.2.3.4,1.2.4.4
Output format for rsa1 keys:
host-or-namelist bits exponent modulus
Output format for rsa and dsa keys, where keytype is either ssh-rsa or `ssh-dsa:
host-or-namelist keytype base64-encoded-key
OPTIONS
The following options are supported:
-f filename Read hosts or addrlist namelist pairs from this file, one per line. If you specity - instead of a filename,
ssh-keyscan reads hosts or addrlist namelist pairs from the standard input.
-p port Port to connect to on the remote host.
-T timeout Set the timeout for connection attempts. If timeout seconds have elapsed since a connection was initiated to a
host or since the last time anything was read from that host, the connection is closed and the host in question
is considered unavailable. The default is for timeout is 5 seconds.
-t type Specify the type of the key to fetch from the scanned hosts. The possible values for type are rsa1 for protocol
version 1 and rsa or dsa for protocol version 2. Specify multiple values by separating them with commas. The
default is rsa1.
-v Specify verbose mode. Print debugging messages about progress.
-4 Force to use IPv4 addresses only.
-6 Forces to use IPv6 addresses only.
SECURITY
If a ssh_known_hosts file is constructed using ssh-keyscan without verifying the keys, users are vulnerable to man-in-the-middle attacks.
If the security model allows such a risk, ssh-keyscan can help in the detection of tampered keyfiles or man-in-the-middle attacks which
have begun after the ssh_known_hosts file was created.
EXAMPLES
Example 1 Printing the rsa1 Host Key
The following example prints the rsa1 host key for machine hostname:
$ ssh-keyscan hostname
Example 2 Finding All Hosts
The following commands finds all hosts from the file ssh_hosts which have new or different keys from those in the sorted file
ssh_known_hosts:
$ ssh-keyscan -t rsa,dsa -f ssh_hosts |
sort -u - ssh_known_hosts | diff ssh_known_hosts -
FILES
/etc/ssh_known_hosts
EXIT STATUS
The following exit values are returned:
0 No usage errors. ssh-keyscan might or might not have succeeded or failed to scan one, more or all of the given hosts.
1 Usage error.
ATTRIBUTES
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+-----------------------------+-----------------------------+
|Availability |SUNWsshu |
+-----------------------------+-----------------------------+
|Interface Stability |Evolving |
+-----------------------------+-----------------------------+
SEE ALSO
ssh(1), sshd(1M), attributes(5)
AUTHORS
David Mazieres wrote the initial version, and Wayne Davison added suppport for protocol version 2.
BUGS
ssh--keyscan generates
Connection closed by remote host
messages on the consoles of all machines it scans if the server is older than version 2.9. This is because ssh-keyscan opens a connection
to the ssh port, reads the public key, and drops the connection as soon as it gets the key.
SunOS 5.11 24 Jul 2004 ssh-keyscan(1)