Paramiko ignores timeout setting

[bmaupin]

SUMMARY

timeout in ansible.cfg appears to be ignored when using paramiko.

ISSUE TYPE

• Bug Report

COMPONENT NAME

paramiko_ssh

ANSIBLE VERSION

ansible 2.5.5
  config file = /home/user/workspace/git/ansible/ansible.cfg
  configured module search path = ['/home/user/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python3.5/dist-packages/ansible
  executable location = /usr/local/bin/ansible
  python version = 3.5.2 (default, Nov 23 2017, 16:37:01) [GCC 5.4.0 20160609]

CONFIGURATION

[defaults]
timeout = 60
transport = paramiko

OS / ENVIRONMENT

Control machine: Ubuntu 16.04 64-bit
Managed node: RHEL 7 64-bit

STEPS TO REPRODUCE

ansible-playbook --connection=paramiko --timeout=60

EXPECTED RESULTS

Because timeout was set to 60, ansible-playbook shouldn't have timed out before then.

ACTUAL RESULTS

ansible-playbook returns after 34 seconds:

$ time ansible-playbook --connection=paramiko --timeout=60 ... -vvvv
ansible-playbook 2.5.5
config file = ansible.cfg
configured module search path = ['/home/user/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/local/lib/python3.5/dist-packages/ansible
executable location = /usr/local/bin/ansible-playbook
python version = 3.5.2 (default, Nov 23 2017, 16:37:01) [GCC 5.4.0 20160609]
Using ansible.cfg as config file

<server.example.org> ESTABLISH CONNECTION FOR USER: user on PORT 22 TO server.example.org
fatal: [server.example.org]: UNREACHABLE! => {
    "changed": false,
    "msg": "Authentication timeout.",
    "unreachable": true
}

NO MORE HOSTS LEFT ************************************************************************************************************************************************************************************************

PLAY RECAP ********************************************************************************************************************************************************************************************************
server.example.org : ok=0    changed=0    unreachable=1    failed=0


real	0m34.854s
user	0m2.316s
sys	0m0.398s

[ansibot]

Files identified in the description:

• lib/ansible/plugins/connection/paramiko_ssh.py

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

[sivel]

This is due to not passing auth_timeout to SSHClient.connect. The timeout argument for SSHClient.connect only handles the TCP connection. In paramiko 2.2 auth_timeout was added (paramiko/paramiko@0fd54bb), so older versions, such as those shipped with RHEL 6 and 7 do not support this option.

We would need to add logic to handle this.

[bmaupin]

so older versions, such as those shipped with RHEL 6 and 7 do not support this option.

For what it's worth, even the latest Ubuntu (18.04) ships with paramiko 2.0:
https://packages.ubuntu.com/bionic/python-paramiko

Thanks!

[orgito]

#50448 worked for me. It sets auth_timeout with the timeout value if paramiko is at least version 2.2.