BookmarkSubscribeRSS Feed
🔒 This topic is solved and locked. Need further help from the community? Please sign in and ask a new question.
JJP1
Pyrite | Level 9

hi all,

iam getting below warning note while i was running the SAS code that uses SFTp connection.

would you please suggest what does this warning represents ? do i need to amen the code from my end to get rid of WARNING please .?

NOTE: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: POSSIBLE DNS SPOOFING DETECTED!
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The ECDSA host key for
[XXXXXXXXXXXXXXXX.com]:8888 has changed,
and the key for the corresponding IP
address [11.34.7344.898]:8888
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the
host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@
WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS
POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle
attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote
host is
XXX:SDSDSDSgfhgfhgfhgfjhgfjhgfjfjhgj.
Please contact your system administrator.
Add correct host key
in /ff/hh/hh/.ssh/hists to get rid of this message.
Offending ECDSA key in
/ff/hh/hh/.ssh/hists:99
Password authentication is disabled to avoid man-in-the-middle
attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
1 ACCEPTED SOLUTION

Accepted Solutions
Kurt_Bremser
Super User

When a new connection to a SSH host is made for the first time, the identification key sent by the host's SSH server is recorded in ~/.ssh/known_hosts (OpenSSH, other ssh clients may have different filenames) for a combination of fully qualified domain name and numeric IP address. If either the IP address or the key changes (new DNS entry for the first, reconfiguration of the SSH server for the second), the new address/key combination must be confirmed.

Check with the admins that either of the above happened (for security reasons), then log on to your SAS server, and make the connection manually. Confirm the key, and everything should work as before. If not, you may have to re-configure your public/private key authentication (the public key may have been lost on the server if it was reinstalled/reconfigured).

 

View solution in original post

6 REPLIES 6
ChrisNZ
Tourmaline | Level 20

Can you connect from an FTP client?

JJP1
Pyrite | Level 9

Sorry for confussion ,No @ChrisNZ , not able to connect via FT client. thanks. 

Kurt_Bremser
Super User

When a new connection to a SSH host is made for the first time, the identification key sent by the host's SSH server is recorded in ~/.ssh/known_hosts (OpenSSH, other ssh clients may have different filenames) for a combination of fully qualified domain name and numeric IP address. If either the IP address or the key changes (new DNS entry for the first, reconfiguration of the SSH server for the second), the new address/key combination must be confirmed.

Check with the admins that either of the above happened (for security reasons), then log on to your SAS server, and make the connection manually. Confirm the key, and everything should work as before. If not, you may have to re-configure your public/private key authentication (the public key may have been lost on the server if it was reinstalled/reconfigured).

 

JJP1
Pyrite | Level 9

Thanks @Kurt_Bremser . 

May i request to please suggest how you acquired all knowledge please. 

whether do i need to daily read some online PDF material as i also would want to become expert like you please. so i am requesting,so that i will try to achieve

 

Kurt_Bremser
Super User

Start with 40+ years since I wrote my first program (on a card punch, at that!). Experience is something that needs time to acquire, there's no way around that. So don't despair, you probably have lots of time still ahead to catch up with old-timers like me.

 

But you can speed it up:

  • Be never afraid to dig into things; be a tinkerer, try things out, fail, and inquire why you failed. Just make sure you don't blow up the house doing that 😉
  • Learn to use English almost like a native language (English is the lingua franca of computing); in my case, it helped that I'm a Science Fiction fan since youth, and most good SF is written in English, so I had the opportunity to read my favorite stuff in its native language (I read SF in English before I even finished school and went to the university where I first learned to code); I can also recommend to watch TV (your favorite sport, for example) and movies in English. Have a dictionary ready all the time for words you don't yet know.
  • This allows you to make full use of the documentation of things (the good stuff is usually written in English). There is a VERY BIG reason why my Maxim 1 is number one. Being able and willing to use the documentation (from programming languages to printers, disk drives and toasters) liberates you from having to ask someone else. Often my advice here on the communities works like this: somebody asks, I find out that I really don't have a clue, so I look for the documentation, I translate it so it fits the problem in language as plain as possible.
  • And, since the coming-of-age of the internet: Google Is Your Friend, aka Maxim 6. It helps you find the things to study.
  • Finally, there is some kind of talent involved in becoming a good coder. Seeing patterns is one (it enables you to convert someone's action into an algorithm, or identify the functional units in code.).

With SFTP, I really did not know what to do until I had to set up passwordless authentication for the SAS SFTP engine. So I looked what kind of sftp the server uses (OpenSSH), found the website (Maxim 6), started to dig through the doc (Maxim 1), found ssh-keygen, and played around with everything (config files, commandline, ...) until it worked (Maxim 4). On the way I found out how to configure the OpenSSH server (sshd) also.

JJP1
Pyrite | Level 9

Thank you so much @Kurt_Bremser 

 

Ready to join fellow brilliant minds for the SAS Hackathon?

Build your skills. Make connections. Enjoy creative freedom. Maybe change the world. Registration is now open through August 30th. Visit the SAS Hackathon homepage.

Register today!
How to Concatenate Values

Learn how use the CAT functions in SAS to join values from multiple variables into a single value.

Find more tutorials on the SAS Users YouTube channel.

Click image to register for webinarClick image to register for webinar

Classroom Training Available!

Select SAS Training centers are offering in-person courses. View upcoming courses for:

View all other training opportunities.

Discussion stats
  • 6 replies
  • 796 views
  • 3 likes
  • 3 in conversation