topic FTP (SCP) Error in General Topics

FTP (SCP) Error

NavidAlam — Fri, 07 Feb 2020 12:02:49 GMT

Finished generating reports. Please press enter to continue...
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.
Please contact your system administrator.
Add correct host key in /opt/pancfg/home/admin/.ssh/known_hosts to get rid of this message.
Offending RSA key in /opt/pancfg/home/admin/.ssh/known_hosts:3
RSA host key for *.*.*.* has changed and you have requested strict checking.
Host key verification failed.
lost connection

How i can edit the opt/pancfg/home/admin/.ssh/known_hosts (Path) ?

Re: FTP (SCP) Error

OtakarKlier — Fri, 07 Feb 2020 16:45:28 GMT

Hello,

If that path is referring to the PAN OS, then you cannot change it. This is by design. Check the client and server to make sure they are configured correctly. Also is the PAN performing ssl decrypt for this connection? If yes turn it off and see if it changes things.

Regards,

Re: FTP (SCP) Error

BPry — Fri, 07 Feb 2020 19:36:19 GMT

@NavidAlam,

You can clear this a few different ways, but assuming that you want to clear it across the entire box you would need to use the following command.

delete authentication user-file ssh-known-hosts user ip <ip> username all

You can also clear all entries by running the following

delete authentication user-file ssh-known-hosts self

Re: FTP (SCP) Error

SARowe_NZ — Fri, 09 Apr 2021 02:32:11 GMT

Hi,

This syntax doesn't exist on Panorama (9.0.x). I have a key (added from GUI) that is under the root home directory, so I can't delete while logged in as "admin" using: delete user-file ssh-known-hosts

How do you delete all keys for all users from Panorama v9.0.x?

Thanks,
Shannon

Re: FTP (SCP) Error

jsitton — Wed, 28 Sep 2022 21:42:38 GMT

I have the same exact problem /opt/pancfg/home/root/.ssh/known_hosts and cannot delete it. I haven't been able to exports logs since August 2022. It feels like I'm in the xkcd comic 979.

Re: FTP (SCP) Error

jsitton — Wed, 28 Sep 2022 22:04:12 GMT

I'm not DenverCoder9

I found an answer.

https://live.paloaltonetworks.com/t5/general-topics/scheduled-log-export-doesn-t-accept-new-ssh-host-key/td-p/51673

AnneB states you change the hostname to ip, test connection, accept add key, change back to hostname, test again. No problem commit. Done. Only need to do it to 1 export for the same host to get the all to work again. YAY.

Re: FTP (SCP) Error

YordanYordanov — Fri, 24 Feb 2023 08:52:03 GMT

did you find some solution ?