tags: close I did some more checking. This is not a bug, its a PEBKC.
What sshd on sarge is doing is returning the ssh_host_rsa_key.pub key by default. The problem was that before this time I had only the rsa1 pubkey in my known_hosts file for this host. On initial login to the host, sometime after installation I must have stored the rsa2 key in known_hosts, and not noticed that I had done so. When I restored the old system keys, the rsa2 pubkey (and the signature) was of course different and ssh rightly complained. I've confirmed this by having another user (who had the old rsa2 key already in their known_hosts) login without incident. Sorry for the noise. V -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]