sshproxy-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[sshproxy-dev] Re: SSHproxy - 'Incompatible ssh peer' error


From: David Guerizec
Subject: [sshproxy-dev] Re: SSHproxy - 'Incompatible ssh peer' error
Date: Mon, 25 Jul 2005 12:43:11 +0200
User-agent: KMail/1.8.1

Le Dimanche 24 Juillet 2005 01:44, vous avez écrit :
> Hello,
>
> Thanks for the savannah access.
>
> Unfortunately, I'm getting a strange error and have no idea how to fix it.
>
> I've added a new entry into 'site' table - with name = my computer's
> hostname and ip_address = my computer's IP. Then, I've added my login
> and password to my computer to the 'user' table (with appropriate site_id).
> I run the server and then I try to run the client... and I get such error:
> Incompatible ssh peer (no acceptable host key)
>
> I could understand this problem if it was a remote host, but I'm trying
> to ssh from my localhost to localhost. I've tried 'ssh my_hostname'
> before, so the RSA key already exists - how could there be any mismatch?
>
> Of course, connecting with a real, external server causes the same error.
>
> Do you have any ideas, how to fix this?

I think yes.

First, note that RSA is not used by the proxy, and SSH protocol 2 must be 
enabled on the remote host (Protocol 2 in /etc/ssh/sshd_config).
Support for protocol 1 is not planned due to security risks, and support for 
RSA is not yet planned, but could be in the future.

Then ensure you have created the configuration directory $HOME/.sshproxy and 
created a DSA key pair with the following command:

$ ssh-keygen -t dsa -f $HOME/.sshproxy/id_dsa

Finally, you have to have the proxy host key in the $HOME/.ssh/known_hosts 
file.
To do this, the simpler is to create a new entry in your /etc/hosts file:

(type this as root)
# echo '127.0.0.1 ssh-proxy' >> /etc/hosts

then, as your user, type:

$ ssh -p 2242 ssh-proxy

if it asks if it can add the host key to your known_hosts file, type y, then 
you can kill it by Control-C.

You should now be ready to retry the SSH client with the following command:

$ ./SSH -P address@hidden address@hidden

Tell me if it still doesn't work.

David

PS: I added your email to the sshproxy-dev mailing list, all communication on 
this subject will take place there.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]