幫忙看看一個網(wǎng)絡(luò)連接問題，謝謝！

achocho

我用windows的ssh client連接到rhel4.1的ssh服務(wù)器，出現(xiàn)下面的提示對話框：

Either the administrator of the remote host computer has changed the host identification, or The ssh protocol has been upgraded from SSH1 to SSH2, or SOMEONE COULD BE EAVESDROPPING ON YOU RIGHT NOW (man-in-the-middle attack). It is NOT RECOMMENDED to connect to the remote host computer until you have contacted the system administrator and found out why the host identification has changed. The fingerprint of the host public key is "XXXXXXXXXXXXXXXXX"...

當(dāng)我點(diǎn)擊“是”之后，輸入密碼，可以看到服務(wù)器上的密碼驗證已通過（因為看到遠(yuǎn)程機(jī)/etc/profile已經(jīng)被執(zhí)行），但下面就是不出命令行。就是說，我沒法執(zhí)行命令，誰幫幫我？

補(bǔ)充說明：

1、這個問題發(fā)生在我將ssh服務(wù)器改了一個IP后，客戶機(jī)ssh連不上了，重啟sshd都不行。我嘗試卸載了openssh-server包，并刪除了/etc/ssh /etc/ssh2 /root/.ssh /root/.ssh2，重新裝過openssh-server包，問題同樣。

2、現(xiàn)在看/root下面只有.ssh2目錄。ls -h -a /root/.ssh2/hostkeys，沒看見我這臺客戶機(jī)的IP，只看見另一臺的，那是一臺linux機(jī)，我將它的公鑰文件刪除了，再連，問題還是照舊。

3、現(xiàn)在是所有的客戶機(jī)都連不上，包括windows、linux、webmin、路由器的ssh2等等。而且，可以肯定的是，密碼已經(jīng)驗證過關(guān)了（有提示Login & password accepted）,用戶profile的腳本也已經(jīng)執(zhí)行了，就是沒命令行出來。

4、該問題困擾我一個月了，我鼓搗那臺服務(wù)器幾十次了，本地login沒問題，也肯定不是硬件問題、OS問題或網(wǎng)絡(luò)連接問題，因為其他的幾個網(wǎng)絡(luò)服務(wù)很正常，流量也很大。還有就是無論用什么用戶ssh連接都是同樣的問題，而且本機(jī)自己ssh自己都出同樣的錯誤。

chenyx

看看日志里面有什么
試試ssh -vv yourhost

jemball

就沒有會嗎？

jemball

ssh -v 192.168.4.45


ssh -v 192.168.4.45
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 192.168.4.45 [192.168.4.45] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/identity type -1
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.9p1
debug1: match: OpenSSH_3.9p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
The authenticity of host '192.168.4.45 (192.168.4.45)' can't be established.
RSA key fingerprint is 49:fb:3d:69:c7:56:7c:85:89:13:cb:3a:c1:ac:d9:a9.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.4.45' (RSA) to the list of known hosts.
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
Connection closed by 192.168.4.45