Intel® DevCloud
Help for those needing help starting or connecting to the Intel® DevCloud
1716 Discussions

Announcement: Changes to SSH Server on DevCloud

JesusE_Intel
Moderator
1,339 Views

You probably noticed the following warning when trying to connect to oneAPI DevCloud:

 

 

$ ssh devcloud
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:/Dlip01tdMyRmhMDc870Z4Uk7AancwwoTnbb0EZajK0.
Please contact your system administrator.
Add correct host key in /home/<user_name>/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /home/<user_name>/.ssh/known_hosts:#
Host key for ssh.devcloud.intel.com has changed and you have requested strict checking.
Host key verification failed.
kex_exchange_identification: Connection closed by remote host
Connection closed by UNKNOWN port 65535

 

 

Cause:
We have just migrated oneAPI DevCloud to a new SSH tunnel server and upgraded the SSH server version to OpenSSH _8.2p1. For this reason the we are unable to reuse the old SSH fingerprint for the new server.

Remediation:
Step 1: remove the offending fingerprint(s).

Method 1: rename your existing ~/.ssh/known_hosts file to something else, such as ~/.ssh/known_hosts.yymmdd

 

$ mv ~/.ssh/known_hosts ~/.ssh/known_hosts.220623

 

Method 2: remove the offending host SSH fingerprint only:

 

$ ssh-keygen -R ssh.devcloud.intel.com

# Host ssh.devcloud.intel.com found: line 1
# Host ssh.devcloud.intel.com found: line 2
# Host ssh.devcloud.intel.com found: line 3
/home/<user_name>/.ssh/known_hosts updated.
Original contents retained as /home/<user_name>/.ssh/known_hosts.old

 

Step 2: reconnect to the DevCloud and accept the new key.

 

$ ssh devcloud
The authenticity of host 'ssh.devcloud.intel.com (12.229.61.118)' can't be established.
ED25519 key fingerprint is SHA256:/Dlip01tdMyRmhMDc870Z4Uk7AancwwoTnbb0EZajK0.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added 'ssh.devcloud.intel.com' (ED25519) to the list of known hosts.

 

Please let us know if you encounter any issues.
Thank you.

The Intel DevCloud team.

0 Kudos
0 Replies
Reply