topic Re: SFTP WARNING note in SAS batch job in SAS Programming

SFTP WARNING note in SAS batch job

JJP1 — Thu, 18 Jun 2020 09:47:01 GMT

hi all,

iam getting below warning note while i was running the SAS code that uses SFTp connection.

would you please suggest what does this warning represents ? do i need to amen the code from my end to get rid of WARNING please .?

NOTE: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: POSSIBLE DNS SPOOFING DETECTED!
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The ECDSA host key for
[XXXXXXXXXXXXXXXX.com]:8888 has changed,
and the key for the corresponding IP
address [11.34.7344.898]:8888
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the
host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@
WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS
POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle
attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote
host is
XXX:SDSDSDSgfhgfhgfhgfjhgfjhgfjfjhgj.
Please contact your system administrator.
Add correct host key
in /ff/hh/hh/.ssh/hists to get rid of this message.
Offending ECDSA key in
/ff/hh/hh/.ssh/hists:99
Password authentication is disabled to avoid man-in-the-middle
attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.

Re: SFTP WARNING note in SAS batch job

ChrisNZ — Thu, 18 Jun 2020 10:51:03 GMT

Can you connect from an FTP client?

Re: SFTP WARNING note in SAS batch job

Kurt_Bremser — Thu, 18 Jun 2020 11:04:46 GMT

When a new connection to a SSH host is made for the first time, the identification key sent by the host's SSH server is recorded in ~/.ssh/known_hosts (OpenSSH, other ssh clients may have different filenames) for a combination of fully qualified domain name and numeric IP address. If either the IP address or the key changes (new DNS entry for the first, reconfiguration of the SSH server for the second), the new address/key combination must be confirmed.

Check with the admins that either of the above happened (for security reasons), then log on to your SAS server, and make the connection manually. Confirm the key, and everything should work as before. If not, you may have to re-configure your public/private key authentication (the public key may have been lost on the server if it was reinstalled/reconfigured).

Re: SFTP WARNING note in SAS batch job

JJP1 — Thu, 18 Jun 2020 12:48:17 GMT

Sorry for confussion ,No @ChrisNZ , not able to connect via FT client. thanks.

Re: SFTP WARNING note in SAS batch job

JJP1 — Thu, 18 Jun 2020 13:54:12 GMT

Thanks @Kurt_Bremser .

May i request to please suggest how you acquired all knowledge please.

whether do i need to daily read some online PDF material as i also would want to become expert like you please. so i am requesting,so that i will try to achieve

Re: SFTP WARNING note in SAS batch job

Kurt_Bremser — Thu, 18 Jun 2020 14:49:46 GMT

Start with 40+ years since I wrote my first program (on a card punch, at that!). Experience is something that needs time to acquire, there's no way around that. So don't despair, you probably have lots of time still ahead to catch up with old-timers like me.

But you can speed it up:

Be never afraid to dig into things; be a tinkerer, try things out, fail, and inquire why you failed. Just make sure you don't blow up the house doing that 😉
Learn to use English almost like a native language (English is the lingua franca of computing); in my case, it helped that I'm a Science Fiction fan since youth, and most good SF is written in English, so I had the opportunity to read my favorite stuff in its native language (I read SF in English before I even finished school and went to the university where I first learned to code); I can also recommend to watch TV (your favorite sport, for example) and movies in English. Have a dictionary ready all the time for words you don't yet know.
This allows you to make full use of the documentation of things (the good stuff is usually written in English). There is a VERY BIG reason why my Maxim 1 is number one. Being able and willing to use the documentation (from programming languages to printers, disk drives and toasters) liberates you from having to ask someone else. Often my advice here on the communities works like this: somebody asks, I find out that I really don't have a clue, so I look for the documentation, I translate it so it fits the problem in language as plain as possible.
And, since the coming-of-age of the internet: Google Is Your Friend, aka Maxim 6. It helps you find the things to study.
Finally, there is some kind of talent involved in becoming a good coder. Seeing patterns is one (it enables you to convert someone's action into an algorithm, or identify the functional units in code.).

With SFTP, I really did not know what to do until I had to set up passwordless authentication for the SAS SFTP engine. So I looked what kind of sftp the server uses (OpenSSH), found the website (Maxim 6), started to dig through the doc (Maxim 1), found ssh-keygen, and played around with everything (config files, commandline, ...) until it worked (Maxim 4). On the way I found out how to configure the OpenSSH server (sshd) also.

Re: SFTP WARNING note in SAS batch job

JJP1 — Thu, 18 Jun 2020 15:05:29 GMT

Thank you so much @Kurt_Bremser