POSSIBLE DNS SPOOFING DETECTED

深碍√TFBOYSˉ_ 2024-04-18 23:25 23阅读 0赞

在配置一台宿主机两台docker容器的hadoop集群时，已经配置了三台机器的ssh，但是在启动hadoop的辅助接点时，报错如下：

[root@lzj module]# start-dfs.sh 
    Starting namenodes on [lzj]
    lzj: starting namenode, logging to /opt/module/hadoop-2.7.2/logs/hadoop-root-namenode-lzj.out
    172.17.0.2: starting datanode, logging to /opt/module/hadoop-2.7.2/logs/hadoop-root-datanode-c172b0d0013a.out
    172.17.0.3: starting datanode, logging to /opt/module/hadoop-2.7.2/logs/hadoop-root-datanode-1dadd673bf95.out
    192.168.85.137: starting datanode, logging to /opt/module/hadoop-2.7.2/logs/hadoop-root-datanode-lzj.out
    Starting secondary namenodes [hadoop003]
    hadoop003: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    hadoop003: @       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
    hadoop003: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    hadoop003: The ECDSA host key for hadoop003 has changed,
    hadoop003: and the key for the corresponding IP address 172.17.0.3
    hadoop003: is unchanged. This could either mean that
    hadoop003: DNS SPOOFING is happening or the IP address for the host
    hadoop003: and its host key have changed at the same time.
    hadoop003: Offending key for IP in /root/.ssh/known_hosts:6
    hadoop003: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    hadoop003: @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
    hadoop003: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    hadoop003: IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
    hadoop003: Someone could be eavesdropping on you right now (man-in-the-middle attack)!
    hadoop003: It is also possible that a host key has just been changed.
    hadoop003: The fingerprint for the ECDSA key sent by the remote host is
    hadoop003: SHA256:cBKAZidz8oLvN9IGKLLQFGJfGD0h0s8yrgRV+flRH1k.
    hadoop003: Please contact your system administrator.
    hadoop003: Add correct host key in /root/.ssh/known_hosts to get rid of this message.
    hadoop003: Offending ECDSA key in /root/.ssh/known_hosts:4
    hadoop003: ECDSA host key for hadoop003 has changed and you have requested strict checking.
    hadoop003: Host key verification failed.

如上所示，在hadoop启动辅助接点\[hadoop003\]，即为172.17.0.3接点时，报错`POSSIBLE DNS SPOOFING DETECTED!`，提示远程信息修改，未检测到DNS。

**解决办法**

vi /root/.ssh/known_hosts

进入known\_hosts文件后，删除hadoop003的键值，然后保存。重新启动hadoop集群

hadoop集群启动成功。