[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: man in the middle attack ?



Dr Beco <rcb@beco.cc> writes:
> After disconnecting the net cable, I realized the server was still up! :O
>
> I logged with a innocuous account to read that that was the old server
> which miraculous revived. Some intern from TI turned on the old server
> and it took precedence over the new one. That explained the change of
> the KEY.
>
> The /var/log/auth.log shows:
>
> Jun 20 14:17:01 zebu CRON[24183]: pam_unix(cron:session): session closed
> Aug 20 10:16:23 zebu sshd[1301]: Server listening on port 22.
>
> Mistery solved.

Now I'm really curious, but confused.  Why did the presence of another
server change the key on the original server?  Or did you mean that an
old server was, in error, put up in place of the one you set up earlier
(before the warning from SSH)?

Kind regards,
Aidan Gauland


Reply to: