[Thinlinc-technical] FW: Host key changed, where to remove the old key?

[Peter Astrand]

The "does not concur" message is a little bit special. Here's how it 
works: In a TL cluster, the agents reports their host keys to the master. 
When a client connect, the user only has to confirm the master host key. 
When the master redirects to a certain agent, it tells the client about 
the host key, so that the user does not have to confirm each individual 
agent. However, if the actual host key (according to the SSH connection 
attempt) is different, you will get this warning message. It can happen, 
for example, if you have generated a new SSHD host key without restarting 
"vsmagent". Or, perhaps there's an existing session running which was 
created before the SSH host key was re-generated.

Another possibility is that you have multiple agents with their host names 
(or IPs) mixed up. As you might know, the host names used internally in 
the cluster (for communication between vsmserver and vsmagent) can be 
different from the external host names, which clients uses. The former are 
defined by /vsmserver/terminalservers; the latter by 
/vsmagent/agent_hostname on each agent.

Merry Christmas,
Peter

On Tue, 23 Dec 2014, Barrett Abel (non-Celgene) wrote:

> 
>  
> 
> I have tried on several client machines.
> 
>  
> 
> The only thing I can think of is cygwin’s known_hosts, on the client computers, but I have cleaned that out as well.
> 
>  
> 
>  
> 
> Nope... after removing all the entries in the Registry:
> 
>  
> 
> [IMAGE]
> 
>  
> 
> >
> 
> > -----Original Message-----
> 
> > From: Peter Astrand [mailto:astrand at cendio.se]
> 
> > Sent: Tuesday, December 23, 2014 5:49 AM
> 
> > To: Barrett Abel (non-Celgene)
> 
> > Cc: thinlinc-technical at lists.cendio.se
> 
> > Subject: Re: [Thinlinc-technical] Host key changed, where to remove the
> 
> > old key?
> 
> >
> 
> >
> 
> > On Windows Clients, the host key is stored under
> 
> > Software\Cendio\ThinLinc\tlclient\KnownHosts. Make sure to check both
> 
> > the HKLM and HKCU hives.
> 
> >
> 
> > Br,
> 
> > Peter
> 
> >
> 
> > On Mon, 22 Dec 2014, Barrett Abel (non-Celgene) wrote:
> 
> >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > Hi all,
> 
> > >
> 
> > >
> 
> > >
> 
> > > I think a quick question -
> 
> > >
> 
> > >
> 
> > >
> 
> > > I have rebuilt a TL server and the host key has changed ( same IP and
> 
> > > Hostname )
> 
> > >
> 
> > >
> 
> > >
> 
> > > Even when I remove the keys from the registry ( windows 7 clients )
> 
> > it still complains about the invalid host key..
> 
> > >
> 
> > >
> 
> > >
> 
> > > Where else are the keys stored than the registry on a windows 4.3
> 
> > client?
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > Regards,
> 
> > >
> 
> > > Barrett
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > *********************************************************
> 
> > > THIS ELECTRONIC MAIL MESSAGE AND ANY ATTACHMENT IS CONFIDENTIAL AND
> 
> > > MAY CONTAIN LEGALLY PRIVILEGED INFORMATION INTENDED ONLY FOR THE USE
> 
> > > OF THE INDIVIDUAL OR INDIVIDUALS NAMED ABOVE.
> 
> > > If the reader is not the intended recipient, or the employee or agent
> 
> > > responsible to deliver it to the intended recipient, you are hereby
> 
> > > notified that any dissemination, distribution or copying of this
> 
> > > communication is strictly prohibited. If you have received this
> 
> > > communication in error, please reply to the sender to notify us of
> 
> > the
> 
> > > error and delete the original message. Thank You.
> 
> > >
> 
> > >
> 
> >
> 
> >
> 
> > ---
> 
> > Peter Astrand         ThinLinc Chief Developer
> 
> > Cendio AB       https://urldefense.proofpoint.com/v2/url?u=https-
> 
> > 3A__cendio.com&d=AwIDaQ&c=CZZujK3G2KuXGEKnzq-
> 
> > Hrg&r=ZglVOayWMNRTHeQ_Sbcu_6P6L3aQQczQhDpxhCHMS0g&m=iDd8oQU3lBInIeRNu-
> 
> > Ze78CY5qm7SrFqkCBgjbLn8Pg&s=6OXK0yYRCfbDN1u4HB-l97KENLQ3xWJIpa-
> 
> > y8zOq4jI&e=
> 
> > Teknikringen 8
> 
> >     https://urldefense.proofpoint.com/v2/url?u=https-
> 
> > 3A__twitter.com_ThinLinc&d=AwIDaQ&c=CZZujK3G2KuXGEKnzq-
> 
> > Hrg&r=ZglVOayWMNRTHeQ_Sbcu_6P6L3aQQczQhDpxhCHMS0g&m=iDd8oQU3lBInIeRNu-
> 
> > Ze78CY5qm7SrFqkCBgjbLn8Pg&s=eIguMvZYcpjtrLBm2YWgPK5OaiOApwFlGMTDQeU9ceI
> 
> > &e=
> 
> > 583 30 Linkoping      https://urldefense.proofpoint.com/v2/url?u=https-
> 
> > 3A__facebook.com_ThinLinc&d=AwIDaQ&c=CZZujK3G2KuXGEKnzq-
> 
> > Hrg&r=ZglVOayWMNRTHeQ_Sbcu_6P6L3aQQczQhDpxhCHMS0g&m=iDd8oQU3lBInIeRNu-
> 
> > Ze78CY5qm7SrFqkCBgjbLn8Pg&s=TtdnmPkkMoFt43e_ihy1aftIp98WcbiE5pbI3nmkwc4
> 
> > &e=
> 
> > Phone: +46-13-214600
> 
> >     https://urldefense.proofpoint.com/v2/url?u=https-3A__google.com_-
> 
> > 2BCendioThinLinc&d=AwIDaQ&c=CZZujK3G2KuXGEKnzq-
> 
> > Hrg&r=ZglVOayWMNRTHeQ_Sbcu_6P6L3aQQczQhDpxhCHMS0g&m=iDd8oQU3lBInIeRNu-
> 
> > Ze78CY5qm7SrFqkCBgjbLn8Pg&s=90TY_a4ecqFWFbnR1bEsQGaF0ce2CRQSFPgpmF8dCOY
> 
> > &e=
> 
> *********************************************************
> THIS ELECTRONIC MAIL MESSAGE AND ANY ATTACHMENT IS
> CONFIDENTIAL AND MAY CONTAIN LEGALLY PRIVILEGED
> INFORMATION INTENDED ONLY FOR THE USE OF THE INDIVIDUAL
> OR INDIVIDUALS NAMED ABOVE.
> If the reader is not the intended recipient, or the
> employee or agent responsible to deliver it to the
> intended recipient, you are hereby notified that any
> dissemination, distribution or copying of this
> communication is strictly prohibited. If you have
> received this communication in error, please reply to the
> sender to notify us of the error and delete the original
> message. Thank You.
> 
>


---
Peter Astrand		ThinLinc Chief Developer
Cendio AB		https://cendio.com
Teknikringen 8		https://twitter.com/ThinLinc
583 30 Linkoping	https://facebook.com/ThinLinc
Phone: +46-13-214600	https://google.com/+CendioThinLinc