New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSHD reload during initial play causes Ansible to lose connection #37
Comments
Seems to be related to MACs, and is from paramiko.
Temporarily using default MACs in |
I've deployed these playbooks to several test & production Ubuntu 16.04 hosts using ansible 2.0.x, but I've never experienced this issue...hmmm |
Is there some useful debug info. if you use the |
I'm on Ansible 2.1.0.0 and paramiko 2.0.1, maybe it's something there. No, ansible's verbose mode is not helpful (has it ever been?). On a hunch I checked to make sure my client SSH config and the server SSH config have matching MACs supported:
Top is my client, bottom is our current SSHD template for Ubuntu 16.04. |
I'm going to try again on a new 16.04.1 image today, I'll let you know how it goes. My client OpenSSH is now 7.3(!). |
Works as expected now. Not sure what was up. Closing issue. |
I just hit this bug again on the same 16.04.1 instance that I mentioned working last week. The To solve this problem I commented out all the server's custom MACs, Ciphers, and KexAlgorithms in Anyways, then I had a new problem:
This message is actually saying (from past experience) that the host key changed according to the records in To fix this you have to create an
Then it works. But after that you can remove the Something very weird with Paramiko. |
what if you try using a different connection type instead of paramiko? For example: |
Good idea. I'll try to reproduce the MAC issue above and then switch to |
We need to add one (or both) of these MACs to our In my experience I only get the "incompatible macs" issue when I'm connecting with password authentication (after our So basically, we should add these two MACs to our |
So on openssh 6.7+ you'd have something like:
|
OK, never mind! Just saw your fix. |
Fixes a problem with Paramiko, which Ansible uses for transport. See: http://www.paramiko.org/changelog.html#1.16.0 See: #37
Yah, that's it. Our Ubuntu 14.04 and Debian 7 configs already have these MACs. Not sure why we dropped them. Oops. |
See: http://www.paramiko.org/changelog.html#1.16.0 See: #37 Signed-off-by: James Oguya <j.oguya@cgiar.org>
See: http://www.paramiko.org/changelog.html#1.16.0 See: #37 Signed-off-by: James Oguya <j.oguya@cgiar.org>
See: http://www.paramiko.org/changelog.html#1.16.0 See: #37 Signed-off-by: James Oguya <j.oguya@cgiar.org>
Running the DSpace role on a clean Ubuntu 16.04 host goes very well until the SSHD handler is notified and reloads, causing all other handlers after to fail.
I can manually SSH to the host, but any ansible actions say incompatible SSH server. I guess it's because of the bit about ECDSA/ED25519 host keys. Hmm, ansible 2.0+ made it really tricky to troubleshoot this, as I have no idea which line in my
~/.ssh/known_hosts
this is.The text was updated successfully, but these errors were encountered: