need help with this strange error

[fasi74]

I have started getting the following error on my pve hosts, when i try to access its shell.

"
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
SHA25dgrererertfoGTxoaIf2pWqZ6/qBwQwWKTn8Qt0QcAwNw.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending RSA key in /etc/ssh/ssh_known_hosts:4
remove with:
ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "172.160.5.149"
RSA host key for 172.16.0.49 has changed and you have requested strict checking.
Host key verification failed."

how do i fix this, just for the record, i have done any configurations on the server, also previously i got the same error in another host which i reinstalled to fix.

proxmox newbie alert!


Regards

 

[Moayad]

ssh-keygen -f "/etc/ssh/ssh_known_hosts" -R "172.160.5.149"

Have you tried the suggested command on your Proxmox VE?

 

[fasi74]

i get host 172.160.5.149 not found in "/etc/ssh/ssh_known_hosts"

Have you tried the suggested command on your Proxmox VE?

 

[Moayad]

May you try to update the ssh keys and the certificates using the below command from one node?

pvecm updatecerts --force

 

[fasi74]

May you try to update the ssh keys and the certificates using the below command from one node?

pvecm updatecerts --force

should this be run on the troublesome host console? or any host in the cluster, I have three more hosts in the cluster all others are running fine.

 

[Moayad]

In any node, the command will just update node certificates (and generate all needed files/directories).

 

[fasi74]

In any node, the command will just update node certificates (and generate all needed files/directories).

Thank you I did, however, it only worked when I ran it on the troublesome host, however another host in my cluster got this problem as soon as I ran and fixed the problem on this host.

FG

 

[Moayad]

Can you provide us with the syslog since you run the `pvecm updatecerts` command?

 

[tempacc375924]

Thank you I did, however, it only worked when I ran it on the troublesome host, however another host in my cluster got this problem as soon as I ran and fixed the problem on this host.

FG

@fasi74 See https://forum.proxmox.com/threads/pvecm-updatecert-f-not-working.135812/page-2#post-606349