[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Abiguity about hosts in ssh warning message



On getting one's perspective fine tuned:

When connecting to a remote location with ssh there is a warning message
that can come up if something about the remote host's identification
changes, as compared to the version of it that is saved in one's local
home directory: .ssh/known_hosts

Here's the clip of code that generates it:

		error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
		error("@       WARNING: HOST IDENTIFICATION HAS CHANGED!         @");
		error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
		error("IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!");

Presumably with enough familiarity with everything, it becomes obvious
that the message is talking about an ID sent back by the *remote* host,
but, actually, how is it that one is supposed to know that the message is
not talking about an ID associated with one's current local host?

To fix the problem one is (blandly) supposed to change *the* host
identification.  However, it is disorienting not to use language that
confirms that there are three possible "the" host identifications at hand.  
One maybe means getting root privilige at the remote location, and the
other means modifying (usually by just deleting) a line in the local
.ssh/known_hosts file.  (The third, one can imagine, is what one's local
host might send to the remote machine that it is attempting to connect
to.)

I find endless bandying around of the word "host" throughout the man
pages and other documention in OpenBSD usually without any qualifiers that
say whether the "host" in question is local, remote or maybe even someone
in the middle.   It all slows down the processes of learning what's
happening. 

In this instance, why shouldn't that message read:

error("@       WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! 	@");

?

Or what piece of orientation have I been missing all along?

Austin




Visit your host, monkey.org