port forwarding trouble

[Darren Tucker]

Frederik Eaton wrote:
> When I set up multiple tunnels from remote hosts to ports on
> localhost, I get the following error when I try to use them:
> 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> 
> (even though the keys haven't changed on the remote hosts). I assume
> this is because the known_hosts file doesn't include port numbers.

There's an open bug and patch for this:
http://bugzilla.mindrot.org/show_bug.cgi?id=910

> However, this means that at least as I have things set up tunneling is
> quite unusable. Is there a configuration option that I'm forgetting to
> set which will cause ssh to differentiate between various ports on the
> same host?

As Peter Stuge noted earlier, you can use HostKeyAlias to specify the 
real name of the host you're connecting to over the forward.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.