ssh bastion

38 views
Skip to first unread message

michael...@gmail.com

unread,
Mar 17, 2015, 8:03:36 PM3/17/15
to ansible...@googlegroups.com

Hi all,

I'm trying to use ansible with hosts located inside a DMZ. All the remote hosts have PasswordAuthentication no, RSAAuthentication ye,s and PubkeyAuthentication yes. So, when I try to connect using my playbook I got: http://pastebin.com/hg2HQNVc


Also:


$cat ~/.ssh/config

ControlMaster auto
ControlPath /tmp/ssh-mux-%h-%p-%r
ControlPersist 4h
ForwardAgent yes
ServerAliveInterval 30
ServerAliveCountMax 120

Host bastionhost
    HostName example.com
    User testuser
    Port 22
    IdentityFile /home/localuser/.ssh/id_rsa

Host remotehost
    Hostname 192.168.1.20
    User testuser
    Port 22
    IdentityFile /home/localuser/.ssh/id_rsa
    ProxyCommand ssh bastionhost -W %h:%p

$cat /etc/ansible/ansible.cfg

[defaults]
hostfile       = /etc/ansible/hosts
library        = /usr/share/ansible
remote_tmp     = $HOME/.ansible/tmp
pattern        = *
forks          = 5
poll_interval  = 15
sudo_user      = root
transport      = smart
remote_port    = 22
sudo_exe = sudo
timeout = 10
ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
action_plugins     = /usr/share/ansible_plugins/action_plugins
callback_plugins   = /usr/share/ansible_plugins/callback_plugins
connection_plugins = /usr/share/ansible_plugins/connection_plugins
lookup_plugins     = /usr/share/ansible_plugins/lookup_plugins
vars_plugins       = /usr/share/ansible_plugins/vars_plugins
filter_plugins     = /usr/share/ansible_plugins/filter_plugins
[paramiko_connection]
[ssh_connection]
[accelerate]
accelerate_port = 5099
accelerate_timeout = 30
accelerate_connect_timeout = 5.0

Reply all
Reply to author
Forward
0 new messages