ssh登录的一个问题

vafls_scott

我有两台机器，地址分别为192.168.30.198和192.168.30.199，两台机器上都有project用户
用keepalived，使这两台机器有一个公用IP地址192.168.30.197
现在keepalived的master为199的时候，我可以在198机器上用ssh project@192.168.30.199或ssh project@192.168.30.197登录到master机器（也就是199机器）上去
但当keepalived的master为198的时候，在199机器上，用ssh project@192.168.30.198可以登录，用ssh project@192.168.30.197登录不了，提示信息为：

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed. The fingerprint for the RSA key sent by the remote host is d6:55:75:9f:e3:ce:2b:66:8f:f3:0b:65:32:7b:21:8b. Please contact your system administrator. Add correct host key in /home/project/.ssh/known_hosts to get rid of this message. Offending key in /home/project/.ssh/known_hosts:3 RSA host key for 192.168.30.197 has changed and you have requested strict checking. Host key verification failed.

按照提示，我去看了198机器上的.ssh/known_hosts文件，文件内容为：

192.168.30.197 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA51iwE1nWAdXjn3S2XkJNCpxo3bmZ9LwZBGM120A3BeecWG3pIHGq4AILA7iDwSJa1YVtbXp+ozWAdpBNa VPJpqDWjALZdJXZKJbFqbzigW1+5dz2+NmG7SYCBvI4TuT9qKxbPnx/QINWui5DZ+oLEcgPJSDgvZCZgfLvK4dqwU0= 192.168.30.199 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA51iwE1nWAdXjn3S2XkJNCpxo3bmZ9LwZBGM120A3BeecWG3pIHGq4AILA7iDwSJa1YVtbXp+ozWAdpBNa VPJpqDWjALZdJXZKJbFqbzigW1+5dz2+NmG7SYCBvI4TuT9qKxbPnx/QINWui5DZ+oLEcgPJSDgvZCZgfLvK4dqwU0= 192.168.100.209 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwqCERo2v5rJXbpq03FKrB82oBA/B8sGKIrAQgPfjPfPdw8Sbhu1VI2B/kDA0adzBjq2I9V11pr968L0r iVdSctr+YPGzfaEkiICQjA77HHsLyyzU1WxBg3PbFWlvhUgQGuNqLQML+4iex9E+eMYlzrNL8Cmt8lGDEZ0lnZsYfnk=

我将文件内容清空，并且重启sshd服务，结果和没改以前完全一样。

请知道的人告诉我怎么解决这个问题啊？谢谢！

kenduest

你要改的是 client 端 ~/.ssh/known_hosts, 不是 server 端的

--

vafls_scott

谢谢！问题已解决！