Avamar：收到“中间人攻击”警告

Summary: 尝试使用 SSH 连接到 Avamar 节点时，会收到“中间人攻击”警告。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

尝试使用 SSH 登录到 Avamar 节点时，显示以下错误：

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
e2:**:**:**:05:c9:c8:72:c9:f5:e1:**:**.
Please contact your system administrator.
Add correct host key in /home/admin/.ssh/known_hosts to get rid of this message.
Offending key in /home/admin/.ssh/known_hosts:5
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
Permission denied (publickey,*****-with-mic,password).

Cause

这是一条安全消息，警告注意中间人攻击。

出现此警告的原因可能如下：
  • 中间人攻击
  • 而 RSA key 目标节点上已更改
 
而 RSA key 可能已更改，原因如下：
  • 硬件已更改（例如，节点移植）
  • 主机名已更改
  • RSA keys 已再生

Resolution

警告：如果没有已知原因更改 RSA 密钥，则必须检查网络的安全性。
 
 

只有当 RSA keys 已更改是已知的，请从 中删除旧的 RSA 密钥 known_hosts 原始节点上的文件：
（这可能是 Avamar 应用工具节点。）

1.备份现有的 known_hosts 文件中：

cp -p /home/admin/.ssh/known_hosts  /home/admin/.ssh/known_hosts.`date +%y%m%d`
 

2.删除旧的 RSA key：

示例：如果从“Avamar-Util1”连接到“Avamar-Storage3”并收到上述警告，请在“Avamar-Util1”上运行以下命令：

ssh-keygen -R Avamar-Storage3
 

预期的输出：

Avamar-Storage3 found: line 5
/home/admin/.ssh/known_hosts updated.
Original contents retained as /home/admin/.ssh/known_hosts.old
 

如果收到以下错误，请验证 RSA key （“条目”中的 known_hosts 可以是 IP 地址或完全限定域名 （FQDN））。

ssh-keygen -R Avamar-Storage3
Host Avamar-Storage3 not found in /home/admin/.ssh/known_hosts
 

3.尝试再次登录。

首次尝试登录期间应看到以下内容：

Avamar-Storage3,10.x.x.4' (ECDSA) to the list of known hosts

Additional Information

 

 

Affected Products

Avamar, Avamar Server

Products

Avamar
Article Properties
Article Number: 000037799
Article Type: Solution
Last Modified: 30 Sept 2025
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.