时间戳

首页 > 解决方案 > 如何在气流中删除/抑制警告“未验证远程识别更改”？

ssh - 如何在气流中删除/抑制警告“未验证远程识别更改”？

问题描述

错误：

[2019-04-11 10:08:44,005] {{ssh_operator.py:80}} INFO - ssh_hook is not provided or invalid. Trying ssh_conn_id to create SSHHook.
[2019-04-11 10:08:44,015] {{logging_mixin.py:95}} INFO - [2019-04-11 10:08:44,014] {{base_hook.py:83}} INFO - Using connection to: id: conn_box2. Host: aws13shi02.logitech.com, Port: 22, Schema: None, Login: phonrao, Password: XXXXXXXX, extra: {'timeout': '10', 'compress': 'false', 'no_host_key_check': 'false', 'allow_host_key_change': 'false'}
[2019-04-11 10:08:44,016] {{logging_mixin.py:95}} INFO - [2019-04-11 10:08:44,016] {{ssh_hook.py:155}} WARNING - Remote Identification Change is not verified. This wont protect against Man-In-The-Middle attacks
[2019-04-11 10:08:44,022] {{logging_mixin.py:95}} INFO - [2019-04-11 10:08:44,022] {{transport.py:1746}} INFO - Connected (version 2.0, client OpenSSH_7.2p2)

如何删除/禁止此警告-

WARNING - Remote Identification Change is not verified. This wont protect against Man-In-The-Middle attacks

标签： sshairflow

解决方案

https://airflow.apache.org/docs/stable/howto/connection/ssh.html说

allow_host_key_change - 如果您想允许连接到已更改主机密钥的主机，或者当您收到“远程主机标识已更改”错误时，请设置为 true。这不能防止中间人攻击。其他可能的解决方案是从 ~/.ssh/known_hosts 文件中删除主机条目。默认为假。

推荐阅读