Quick guess: The host key entry seems to be stored in /var/ossec/.ssh/known_hosts Update that entry and you should be good to go. One method would be copying the entry from another known_hosts file that has sshed into the system and accepted the host key. It'll look something like: buffalo1,192.168.1.111 ssh-rsa LONG_STRING_OF_ALPHA_NUMERIC_CHARACTERS_AND_THE_OCCASSIONAL_/
I forget how the documentation says to add the key (or if the registration automatically takes care of this for new systems). On Mon, Mar 15, 2010 at 3:23 AM, Nino Ibrahim <nino.ibra...@gmail.com> wrote: > Hello, > > I use OSSEC agentless to monitoring integrity of my VMware ESX, > yesterday i need to reinstall my VMware ESX after i done OSSEC > agentless getting error when need to access. The error message i get > OSSEC-agentless:INFO:ssh_integrity_check_linux:r...@xxx.xxx.xxx.2 RSA > host key for 'r...@xxx.xxx.xxx.2 has change. Unable to access. > Is anyone know how to solve this? > > Thank you > > Nino >
