SSH no matching key type found while running Ansible Job on RHEL/Centos 6 servers

[kunal kalyanpur]

Hi All,

While running any Ansible job on AWX Tower, I get the following error "Failed to connect to host via SSH. Unable to negotiate with <servername>. No matching host key type found. Their offer: ssh-rsa, ssh-dss", unreachable": true

This is happening only for RHEL 6.x & CentOS 6.x hosts. The same playbook works just fine for RHEL7 & RHEL 8 hosts. I searched and couldn't find an ansible.cfg file on the awx-web or awx-ee container

I am running AWX version 21.14 deployed using k3s cluster

version of ansible running on awx-ee container is: Ansible core 2.14

Is there an environmental variable that can be set in AWX Job settings or is there any other way to ensure Host key checking is ignored completely for EL6 systems?

Looking forward to your update and leads on this. I am stuck and cannot optimally execute playbooks owing to this issue. 

Rgds,

Kunal

[kunal kalyanpur]

Hi,

Can someone kindly provide leads on this. Has anyone experienced this behavior earlier??

Rgds,

Kunal

[Michael Kelly]

The ssh-rsa algorithm was deprecated in OpenSSH some time ago as it is considered to be insecure.

We have had a similar issue with Debian 8 hosts.

We got around the issue by adding the following to the local ssh config

Host *
    PubkeyAcceptedKeyTypes +ssh-rsa

Not really recommended but it works!

Not sure how this could be implemented in AWX.

If you can update the RHEL/CentOS 6 hosts, that would be the way to go.

--
You received this message because you are subscribed to the Google Groups "AWX Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to awx-project...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/awx-project/b4e89582-6694-4e48-89ff-9bdfc415e268n%40googlegroups.com.