帮忙看看一个网络连接问题，谢谢！

achocho

我用windows的ssh client连接到rhel4.1的ssh服务器，出现下面的提示对话框：

Either the administrator of the remote host computer has changed the host identification, or The ssh protocol has been upgraded from SSH1 to SSH2, or SOMEONE COULD BE EAVESDROPPING ON YOU RIGHT NOW (man-in-the-middle attack). It is NOT RECOMMENDED to connect to the remote host computer until you have contacted the system administrator and found out why the host identification has changed. The fingerprint of the host public key is "XXXXXXXXXXXXXXXXX"...

当我点击“是”之后，输入密码，可以看到服务器上的密码验证已通过（因为看到远程机/etc/profile已经被执行），但下面就是不出命令行。就是说，我没法执行命令，谁帮帮我？

补充说明：

1、这个问题发生在我将ssh服务器改了一个IP后，客户机ssh连不上了，重启sshd都不行。我尝试卸载了openssh-server包，并删除了/etc/ssh /etc/ssh2 /root/.ssh /root/.ssh2，重新装过openssh-server包，问题同样。

2、现在看/root下面只有.ssh2目录。ls -h -a /root/.ssh2/hostkeys，没看见我这台客户机的IP，只看见另一台的，那是一台linux机，我将它的公钥文件删除了，再连，问题还是照旧。

3、现在是所有的客户机都连不上，包括windows、linux、webmin、路由器的ssh2等等。而且，可以肯定的是，密码已经验证过关了（有提示Login & password accepted）,用户profile的脚本也已经执行了，就是没命令行出来。

4、该问题困扰我一个月了，我鼓捣那台服务器几十次了，本地login没问题，也肯定不是硬件问题、OS问题或网络连接问题，因为其他的几个网络服务很正常，流量也很大。还有就是无论用什么用户ssh连接都是同样的问题，而且本机自己ssh自己都出同样的错误。

chenyx

看看日志里面有什么
试试ssh -vv yourhost

jemball

就没有会吗？

jemball

ssh -v 192.168.4.45


ssh -v 192.168.4.45
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 192.168.4.45 [192.168.4.45] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/identity type -1
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.9p1
debug1: match: OpenSSH_3.9p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
The authenticity of host '192.168.4.45 (192.168.4.45)' can't be established.
RSA key fingerprint is 49:fb:3d:69:c7:56:7c:85:89:13:cb:3a:c1:ac:d9:a9.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.4.45' (RSA) to the list of known hosts.
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
Connection closed by 192.168.4.45