# authenticity of host cant be established

**URL:** <https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435>\
**Category:** Ansible Project\
**Created:** [July 20, 2020, 2:57pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435 "2020-07-20T14:57:50Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 20, 2020, 2:57pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/1 "2020-07-20T14:57:50Z")

</div>

I setup a few vagrant vms and I ccan ssh to them from vagrant ssh hostname

but when i run ansible -m ping -i inventory app

it keeps saying host key verification failed and prompts me

 ![image.png](https://us1.discourse-cdn.com/ansible/original/2X/1/1c15c13f6b2f8ebd8662b2dcf77ee185ccf536d3.png)

and then when i accept it gives this

 ![image.png](https://us1.discourse-cdn.com/ansible/original/2X/c/cb31df0a0f4a11ba885aab9c1425575deee1f41b.png)

I am able to ssh to the vm with

ssh [vagrant@192.168.0.127](mailto:vagrant@192.168.0.127) with password

any idea?

---

<div class="post-metadata">

**Author:** ![jolleye](https://avatars.discourse-cdn.com/v4/letter/j/47e85d/32.png) [@jolleye](https://forum.ansible.com/u/jolleye)\
**Post date:** [July 20, 2020, 4:01pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/2 "2020-07-20T16:01:44Z")

</div>

From what you’ve said, I think you just need to point to the vagrant private key in your hosts file.

ansible\_user=vagrant  
ansible\_ssh\_private\_key\_file=~/.vagrant.d/insecure\_private\_key

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 20, 2020, 6:38pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/3 "2020-07-20T18:38:23Z")

</div>

i did. thats what i have

---

<div class="post-metadata">

**Author:** ![jolleye](https://avatars.discourse-cdn.com/v4/letter/j/47e85d/32.png) [@jolleye](https://forum.ansible.com/u/jolleye)\
**Post date:** [July 20, 2020, 7:01pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/4 "2020-07-20T19:01:44Z")

</div>

OK. Please post your inventory file.

Also, try running “ **ansible -m ping -i inventory app -vvv** ” so we can see more detail.

And, can you be sure that the private key file is good by doing “\*\*ssh -i ~/.vagrant.d/insecure\_private\_key vagrant@\*\ ***192.168.0.183** ”? If you can ssh to the managed nodes using that private key and the inventory file is properly configured to use it, then Ansible should be able to authenticate as well.

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 20, 2020, 10:29pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/5 "2020-07-20T22:29:09Z")

</div>

(ansible) Tonys-MacBook-Pro:ansible tonywong$ ansible -m ping -i hosts servers  
The authenticity of host ‘192.168.0.151 (192.168.0.151)’ can’t be established.  
ECDSA key fingerprint is SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg.  
Are you sure you want to continue connecting (yes/no/[fingerprint])? 192.168.0.127 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: [tonywong@192.168.0.127](mailto:tonywong@192.168.0.127): Permission denied (publickey,password).”,  
“unreachable”: true  
}

192.168.0.151 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: Host key verification failed.”,  
“unreachable”: true  
}  
(ansible) Tonys-MacBook-Pro:ansible tonywong$ ansible -m ping -i hosts servers -vvvv  
ansible 2.9.10  
config file = None  
configured module search path = [‘/Users/tonywong/.ansible/plugins/modules’, ‘/usr/share/ansible/plugins/modules’]  
ansible python module location = /Users/tonywong/virtualenv/ansible/lib/python3.7/site-packages/ansible  
executable location = /Users/tonywong/virtualenv/ansible/bin/ansible  
python version = 3.7.7 (default, Mar 10 2020, 15:43:03) [Clang 11.0.0 (clang-1100.0.33.17)]  
No config file found; using defaults  
setting up inventory plugins  
host\_list declined parsing /Users/tonywong/virtualenv/ansible/hosts as it did not pass its verify\_file() method  
script declined parsing /Users/tonywong/virtualenv/ansible/hosts as it did not pass its verify\_file() method  
auto declined parsing /Users/tonywong/virtualenv/ansible/hosts as it did not pass its verify\_file() method  
Parsed /Users/tonywong/virtualenv/ansible/hosts inventory source with ini plugin  
Loading callback plugin minimal of type stdout, v2.0 from /Users/tonywong/virtualenv/ansible/lib/python3.7/site-packages/ansible/plugins/callback/minimal.py  
META: ran handlers  
\<192.168.0.127\> ESTABLISH SSH CONNECTION FOR USER: None  
\<192.168.0.127\> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/Users/tonywong/.ansible/cp/02cb59e3a7 192.168.0.127 ‘/bin/sh -c ‘"’“‘echo ~ && sleep 0’”’“‘’  
\<192.168.0.151\> ESTABLISH SSH CONNECTION FOR USER: None  
\<192.168.0.151\> SSH: EXEC ssh -vvv -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/Users/tonywong/.ansible/cp/ffb7a15afe 192.168.0.151 '/bin/sh -c '”‘“‘echo ~ && sleep 0’”’"‘’  
\<192.168.0.127\> (255, b’‘, b’OpenSSH\_8.1p1, LibreSSL 2.7.3\r\ndebug1: Reading configuration data /etc/ssh/ssh\_config\r\ndebug1: /etc/ssh/ssh\_config line 47:Applying options for _\r\ndebug2: resolve\_canonicalize: hostname 192.168.0.127 is address\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: Control socket “/Users/tonywong/.ansible/cp/02cb59e3a7” does not exist\r\ndebug2: ssh\_connect\_direct\r\ndebug1: Connecting to 192.168.0.127 [192.168.0.127] port 22.\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: fd 3 clearing O\_NONBLOCK\r\ndebug1: Connection established.\r\ndebug3: timeout: 9990 ms remain after connect\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa type 0\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519 type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss-cert type -1\r\ndebug1: Local version string SSH-2.0-OpenSSH\_8.1\r\ndebug1: Remote protocol version 2.0, remote software version OpenSSH\_7.4\r\ndebug1: match: OpenSSH\_7.4 pat OpenSSH\_7.0_,OpenSSH\_7.1\*,OpenSSH\_7.2\*,OpenSSH\_7.3\*,OpenSSH\_7.4\*,OpenSSH\_7.5\*,OpenSSH\_7.6\*,OpenSSH\_7.7\* compat 0x04000002\r\ndebug2: fd 3setting O\_NONBLOCK\r\ndebug1: Authenticating to [192.168.0.127:22](http://192.168.0.127:22) as 'tonywong'\r\ndebug3: hostkeys\_foreach: reading file “/Users/tonywong/.ssh/known\_hosts”\r\ndebug3: record\_hostkey: found key type ECDSA in file /Users/tonywong/.ssh/known\_hosts:41\r\ndebug3: load\_hostkeys: loaded 1 keys from 192.168.0.127\r\ndebug3: order\_hostkeyalgs: prefer hostkeyalgs: [ecdsa-sha2-nistp256-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp256-cert-v01@openssh.com),[ecdsa-sha2-nistp384-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp384-cert-v01@openssh.com),[ecdsa-sha2-nistp521-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp521-cert-v01@openssh.com),ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\r\ndebug3: send packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT sent\r\ndebug3: receive packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT received\r\ndebug2: local client KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c\r\ndebug2: host key algorithms: [ecdsa-sha2-nistp256-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp256-cert-v01@openssh.com),[ecdsa-sha2-nistp384-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp384-cert-v01@openssh.com),[ecdsa-sha2-nistp521-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp521-cert-v01@openssh.com),ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[ssh-ed25519-cert-v01@openssh.com](mailto:ssh-ed25519-cert-v01@openssh.com),[rsa-sha2-512-cert-v01@openssh.com](mailto:rsa-sha2-512-cert-v01@openssh.com),[rsa-sha2-256-cert-v01@openssh.com](mailto:rsa-sha2-256-cert-v01@openssh.com),[ssh-rsa-cert-v01@openssh.com](mailto:ssh-rsa-cert-v01@openssh.com),ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: compression stoc: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug2: peer server KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\r\ndebug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: compression stoc: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug1: kex: algorithm: curve25519-sha256\r\ndebug1: kex: host key algorithm: ecdsa-sha2-nistp256\r\ndebug1: kex: server-\>client cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug1: kex: client-\>server cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug3: send packet: type 30\r\ndebug1: expecting SSH2\_MSG\_KEX\_ECDH\_REPLY\r\ndebug3: receive packet: type 31\r\ndebug1: Server host key: ecdsa-sha2-nistp256 SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg\r\ndebug3: hostkeys\_foreach: reading file “/Users/tonywong/.ssh/known\_hosts”\r\ndebug3: record\_hostkey: found key type ECDSA in file /Users/tonywong/.ssh/known\_hosts:41\r\ndebug3: load\_hostkeys: loaded 1 keys from 192.168.0.127\r\ndebug1: Host '192.168.0.127' is known and matches the ECDSA host key.\r\ndebug1: Found key in /Users/tonywong/.ssh/known\_hosts:41\r\ndebug3: send packet: type 21\r\ndebug2: set\_newkeys: mode 1\r\ndebug1: rekey out after 134217728 blocks\r\ndebug1: SSH2\_MSG\_NEWKEYS sent\r\ndebug1: expecting SSH2\_MSG\_NEWKEYS\r\ndebug3: receive packet: type 21\r\ndebug1: SSH2\_MSG\_NEWKEYS received\r\ndebug2: set\_newkeys: mode 0\r\ndebug1: rekey in after 134217728 blocks\r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_dsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ecdsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ed25519 \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_xmss \r\ndebug2: pubkey\_prepare: done\r\ndebug3: send packet: type 5\r\ndebug3: receive packet: type 7\r\ndebug1: SSH2\_MSG\_EXT\_INFO received\r\ndebug1: kex\_input\_ext\_info: server-sig-algs=\<rsa-sha2-256,rsa-sha2-512\>\r\ndebug3: receive packet: type 6\r\ndebug2: service\_accept: ssh-userauth\r\ndebug1: SSH2\_MSG\_SERVICE\_ACCEPT received\r\ndebug3: send packet: type 50\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug3: start over, passed a different list publickey,password\r\ndebug3: preferred gssapi-with-mic,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_lookup publickey\r\ndebug3: remaining preferred: ,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_is\_enabled publickey\r\ndebug1: Next authentication method: publickey\r\ndebug1: Offering public key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug3: send packet: type 50\r\ndebug2: we sent a publickey packet, wait for reply\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_dsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_dsa: No such file ordirectory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ecdsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ecdsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ed25519\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ed25519: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_xmss\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_xmss: No such file or directory\r\ndebug2: we didnot send a packet, disable method\r\ndebug1: No more authentication methods to try.\r[ntonywong@192.168.0.127]([mailto:ntonywong@192.168.0.127](mailto:ntonywong@192.168.0.127)): Permission denied (publickey,password).\r\n’)  
192.168.0.127 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: OpenSSH\_8.1p1, LibreSSL 2.7.3\r\ndebug1: Reading configuration data /etc/ssh/ssh\_config\r\ndebug1: /etc/ssh/ssh\_config line 47: Applying options for _\r\ndebug2: resolve\_canonicalize: hostname 192.168.0.127 is address\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: Control socket "/Users/tonywong/.ansible/cp/02cb59e3a7" does not exist\r\ndebug2: ssh\_connect\_direct\r\ndebug1: Connecting to 192.168.0.127 [192.168.0.127] port 22.\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: fd 3 clearing O\_NONBLOCK\r\ndebug1: Connection established.\r\ndebug3: timeout: 9990 ms remain after connect\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa type 0\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519 type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss-cert type -1\r\ndebug1: Local version string SSH-2.0-OpenSSH\_8.1\r\ndebug1: Remote protocol version 2.0, remote software version OpenSSH\_7.4\r\ndebug1: match: OpenSSH\_7.4 pat OpenSSH\_7.0_,OpenSSH\_7.1\*,OpenSSH\_7.2\*,OpenSSH\_7.3\*,OpenSSH\_7.4\*,OpenSSH\_7.5\*,OpenSSH\_7.6\*,OpenSSH\_7.7\* compat 0x04000002\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: Authenticating to [192.168.0.127:22](http://192.168.0.127:22) as ‘tonywong’\r\ndebug3: hostkeys\_foreach: reading file "/Users/tonywong/.ssh/known\_hosts"\r\ndebug3: record\_hostkey: found key type ECDSA in file /Users/tonywong/.ssh/known\_hosts:41\r\ndebug3: load\_hostkeys: loaded 1 keysfrom 192.168.0.127\r\ndebug3: order\_hostkeyalgs: prefer hostkeyalgs: [ecdsa-sha2-nistp256-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp256-cert-v01@openssh.com),[ecdsa-sha2-nistp384-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp384-cert-v01@openssh.com),[ecdsa-sha2-nistp521-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp521-cert-v01@openssh.com),ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521\r\ndebug3: send packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT sent\r\ndebug3: receive packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT received\r\ndebug2: local client KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c\r\ndebug2: host key algorithms: [ecdsa-sha2-nistp256-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp256-cert-v01@openssh.com),[ecdsa-sha2-nistp384-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp384-cert-v01@openssh.com),[ecdsa-sha2-nistp521-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp521-cert-v01@openssh.com),ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[ssh-ed25519-cert-v01@openssh.com](mailto:ssh-ed25519-cert-v01@openssh.com),[rsa-sha2-512-cert-v01@openssh.com](mailto:rsa-sha2-512-cert-v01@openssh.com),[rsa-sha2-256-cert-v01@openssh.com](mailto:rsa-sha2-256-cert-v01@openssh.com),[ssh-rsa-cert-v01@openssh.com](mailto:ssh-rsa-cert-v01@openssh.com),ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: compression stoc: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug2: peer server KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\r\ndebug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: compression stoc: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug1: kex: algorithm: curve25519-sha256\r\ndebug1: kex: host key algorithm: ecdsa-sha2-nistp256\r\ndebug1: kex: server-\>client cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug1: kex: client-\>server cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug3: send packet: type 30\r\ndebug1: expecting SSH2\_MSG\_KEX\_ECDH\_REPLY\r\ndebug3: receive packet: type 31\r\ndebug1: Server host key: ecdsa-sha2-nistp256 SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg\r\ndebug3: hostkeys\_foreach: reading file "/Users/tonywong/.ssh/known\_hosts"\r\ndebug3: record\_hostkey: found key type ECDSA in file /Users/tonywong/.ssh/known\_hosts:41\r\ndebug3: load\_hostkeys: loaded 1 keys from 192.168.0.127\r\ndebug1: Host ‘192.168.0.127’ is known and matches the ECDSA host key.\r\ndebug1: Found key in /Users/tonywong/.ssh/known\_hosts:41\r\ndebug3: send packet: type 21\r\ndebug2: set\_newkeys: mode 1\r\ndebug1: rekey out after 134217728 blocks\r\ndebug1: SSH2\_MSG\_NEWKEYS sent\r\ndebug1:expecting SSH2\_MSG\_NEWKEYS\r\ndebug3: receive packet: type 21\r\ndebug1: SSH2\_MSG\_NEWKEYS received\r\ndebug2: set\_newkeys: mode 0\r\ndebug1: rekey in after 134217728 blocks\r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug1: Will attempt key:/Users/tonywong/.ssh/id\_dsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ecdsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ed25519 \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_xmss \r\ndebug2: pubkey\_prepare: done\r\ndebug3: send packet: type 5\r\ndebug3: receive packet: type 7\r\ndebug1: SSH2\_MSG\_EXT\_INFO received\r\ndebug1: kex\_input\_ext\_info: server-sig-algs=\<rsa-sha2-256,rsa-sha2-512\>\r\ndebug3: receive packet: type 6\r\ndebug2: service\_accept: ssh-userauth\r\ndebug1: SSH2\_MSG\_SERVICE\_ACCEPT received\r\ndebug3: send packet: type 50\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug3: start over, passed a different list publickey,password\r\ndebug3: preferred gssapi-with-mic,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_lookup publickey\r\ndebug3: remaining preferred: ,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_is\_enabled publickey\r\ndebug1: Next authentication method: publickey\r\ndebug1: Offering public key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug3: send packet: type 50\r\ndebug2: we sent a publickey packet, wait for reply\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_dsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_dsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ecdsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ecdsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ed25519\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ed25519: No suchfile or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_xmss\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_xmss: No such file or directory\r\ndebug2: we did not send a packet, disable method\r\ndebug1: No more authentication methods to try.\r[ntonywong@192.168.0.127]([mailto:ntonywong@192.168.0.127](mailto:ntonywong@192.168.0.127)): Permission denied (publickey,password).”,  
“unreachable”: true  
}  
The authenticity of host ‘192.168.0.151 (192.168.0.151)’ can’t be established.  
ECDSA key fingerprint is SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg.  
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes  
\<192.168.0.151\> (255, b’‘, b’OpenSSH\_8.1p1, LibreSSL 2.7.3\r\ndebug1: Reading configuration data /etc/ssh/ssh\_config\r\ndebug1: /etc/ssh/ssh\_config line 47:Applying options for _\r\ndebug2: resolve\_canonicalize: hostname 192.168.0.151 is address\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: Control socket “/Users/tonywong/.ansible/cp/ffb7a15afe” does not exist\r\ndebug2: ssh\_connect\_direct\r\ndebug1: Connecting to 192.168.0.151 [192.168.0.151] port 22.\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: fd 3 clearing O\_NONBLOCK\r\ndebug1: Connection established.\r\ndebug3: timeout: 9990 ms remain after connect\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa type 0\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519 type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss-cert type -1\r\ndebug1: Local version string SSH-2.0-OpenSSH\_8.1\r\ndebug1: Remote protocol version 2.0, remote software version OpenSSH\_7.4\r\ndebug1: match: OpenSSH\_7.4 pat OpenSSH\_7.0_,OpenSSH\_7.1\*,OpenSSH\_7.2\*,OpenSSH\_7.3\*,OpenSSH\_7.4\*,OpenSSH\_7.5\*,OpenSSH\_7.6\*,OpenSSH\_7.7\* compat 0x04000002\r\ndebug2: fd 3setting O\_NONBLOCK\r\ndebug1: Authenticating to [192.168.0.151:22](http://192.168.0.151:22) as 'tonywong'\r\ndebug3: hostkeys\_foreach: reading file “/Users/tonywong/.ssh/known\_hosts”\r\ndebug3: send packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT sent\r\ndebug3: receive packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT received\r\ndebug2: local client KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c\r\ndebug2: host key algorithms: [ecdsa-sha2-nistp256-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp256-cert-v01@openssh.com),[ecdsa-sha2-nistp384-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp384-cert-v01@openssh.com),[ecdsa-sha2-nistp521-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp521-cert-v01@openssh.com),[ssh-ed25519-cert-v01@openssh.com](mailto:ssh-ed25519-cert-v01@openssh.com),[rsa-sha2-512-cert-v01@openssh.com](mailto:rsa-sha2-512-cert-v01@openssh.com),[rsa-sha2-256-cert-v01@openssh.com](mailto:rsa-sha2-256-cert-v01@openssh.com),[ssh-rsa-cert-v01@openssh.com](mailto:ssh-rsa-cert-v01@openssh.com),ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: compression stoc: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug2: peer server KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\r\ndebug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: compression stoc: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug1: kex: algorithm: curve25519-sha256\r\ndebug1: kex: host key algorithm: ecdsa-sha2-nistp256\r\ndebug1: kex: server-\>client cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug1: kex: client-\>server cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug3: send packet: type 30\r\ndebug1: expecting SSH2\_MSG\_KEX\_ECDH\_REPLY\r\ndebug3: receive packet: type 31\r\ndebug1: Server host key: ecdsa-sha2-nistp256 SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg\r\ndebug3: hostkeys\_foreach: reading file “/Users/tonywong/.ssh/known\_hosts”\r\nWarning: Permanently added '192.168.0.151' (ECDSA) to the list of known hosts.\r\ndebug3: send packet: type 21\r\ndebug2: set\_newkeys: mode 1\r\ndebug1: rekey out after 134217728 blocks\r\ndebug1: SSH2\_MSG\_NEWKEYS sent\r\ndebug1: expecting SSH2\_MSG\_NEWKEYS\r\ndebug3: receive packet: type 21\r\ndebug1: SSH2\_MSG\_NEWKEYS received\r\ndebug2: set\_newkeys: mode 0\r\ndebug1: rekey in after 134217728 blocks\r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug1:Will attempt key: /Users/tonywong/.ssh/id\_dsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ecdsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ed25519 \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_xmss \r\ndebug2: pubkey\_prepare: done\r\ndebug3: send packet: type 5\r\ndebug3: receive packet: type 7\r\ndebug1: SSH2\_MSG\_EXT\_INFO received\r\ndebug1: kex\_input\_ext\_info: server-sig-algs=\<rsa-sha2-256,rsa-sha2-512\>\r\ndebug3: receive packet: type 6\r\ndebug2: service\_accept: ssh-userauth\r\ndebug1: SSH2\_MSG\_SERVICE\_ACCEPT received\r\ndebug3: send packet: type 50\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug3: start over, passed a different list publickey,password\r\ndebug3: preferred gssapi-with-mic,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_lookup publickey\r\ndebug3: remaining preferred: ,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_is\_enabled publickey\r\ndebug1: Next authentication method: publickey\r\ndebug1: Offering public key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug3: send packet: type 50\r\ndebug2: we sent a publickey packet, wait for reply\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_dsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_dsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ecdsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ecdsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ed25519\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ed25519: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_xmss\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_xmss: No such file or directory\r\ndebug2: we did not send a packet, disable method\r\ndebug1: No more authentication methods to try.\r[ntonywong@192.168.0.151]([mailto:ntonywong@192.168.0.151](mailto:ntonywong@192.168.0.151)): Permission denied (publickey,password).\r\n’)  
192.168.0.151 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: OpenSSH\_8.1p1, LibreSSL 2.7.3\r\ndebug1: Reading configuration data /etc/ssh/ssh\_config\r\ndebug1: /etc/ssh/ssh\_config line 47: Applying options for _\r\ndebug2: resolve\_canonicalize: hostname 192.168.0.151 is address\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: Control socket "/Users/tonywong/.ansible/cp/ffb7a15afe" does not exist\r\ndebug2: ssh\_connect\_direct\r\ndebug1: Connecting to 192.168.0.151 [192.168.0.151] port 22.\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: fd 3 clearing O\_NONBLOCK\r\ndebug1: Connection established.\r\ndebug3: timeout: 9990 ms remain after connect\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa type 0\r\ndebug1: identity file /Users/tonywong/.ssh/id\_rsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_dsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ecdsa-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519 type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_ed25519-cert type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss type -1\r\ndebug1: identity file /Users/tonywong/.ssh/id\_xmss-cert type -1\r\ndebug1: Local version string SSH-2.0-OpenSSH\_8.1\r\ndebug1: Remote protocol version 2.0, remote software version OpenSSH\_7.4\r\ndebug1: match: OpenSSH\_7.4 pat OpenSSH\_7.0_,OpenSSH\_7.1\*,OpenSSH\_7.2\*,OpenSSH\_7.3\*,OpenSSH\_7.4\*,OpenSSH\_7.5\*,OpenSSH\_7.6\*,OpenSSH\_7.7\* compat 0x04000002\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: Authenticating to [192.168.0.151:22](http://192.168.0.151:22) as ‘tonywong’\r\ndebug3: hostkeys\_foreach: reading file "/Users/tonywong/.ssh/known\_hosts"\r\ndebug3: send packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT sent\r\ndebug3: receive packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT received\r\ndebug2: local client KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c\r\ndebug2: host key algorithms: [ecdsa-sha2-nistp256-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp256-cert-v01@openssh.com),[ecdsa-sha2-nistp384-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp384-cert-v01@openssh.com),[ecdsa-sha2-nistp521-cert-v01@openssh.com](mailto:ecdsa-sha2-nistp521-cert-v01@openssh.com),[ssh-ed25519-cert-v01@openssh.com](mailto:ssh-ed25519-cert-v01@openssh.com),[rsa-sha2-512-cert-v01@openssh.com](mailto:rsa-sha2-512-cert-v01@openssh.com),[rsa-sha2-256-cert-v01@openssh.com](mailto:rsa-sha2-256-cert-v01@openssh.com),[ssh-rsa-cert-v01@openssh.com](mailto:ssh-rsa-cert-v01@openssh.com),ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: compression stoc: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug2: peer server KEXINIT proposal\r\ndebug2: KEX algorithms: curve25519-sha256,[curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\r\ndebug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,[aes128-gcm@openssh.com](mailto:aes128-gcm@openssh.com),[aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com),aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),[umac-128-etm@openssh.com](mailto:umac-128-etm@openssh.com),[hmac-sha2-256-etm@openssh.com](mailto:hmac-sha2-256-etm@openssh.com),[hmac-sha2-512-etm@openssh.com](mailto:hmac-sha2-512-etm@openssh.com),[hmac-sha1-etm@openssh.com](mailto:hmac-sha1-etm@openssh.com),[umac-64@openssh.com](mailto:umac-64@openssh.com),[umac-128@openssh.com](mailto:umac-128@openssh.com),hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: compression stoc: none,[zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug1: kex: algorithm:curve25519-sha256\r\ndebug1: kex: host key algorithm: ecdsa-sha2-nistp256\r\ndebug1: kex: server-\>client cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug1: kex: client-\>server cipher: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com) MAC: compression: [zlib@openssh.com](mailto:zlib@openssh.com)\r\ndebug3: send packet: type 30\r\ndebug1: expecting SSH2\_MSG\_KEX\_ECDH\_REPLY\r\ndebug3: receive packet: type 31\r\ndebug1: Server host key: ecdsa-sha2-nistp256 SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg\r\ndebug3: hostkeys\_foreach: reading file "/Users/tonywong/.ssh/known\_hosts"\r\nWarning: Permanently added ‘192.168.0.151’ (ECDSA) to the list of known hosts.\r\ndebug3: send packet: type 21\r\ndebug2: set\_newkeys: mode 1\r\ndebug1: rekey out after 134217728 blocks\r\ndebug1: SSH2\_MSG\_NEWKEYS sent\r\ndebug1: expecting SSH2\_MSG\_NEWKEYS\r\ndebug3: receive packet: type 21\r\ndebug1: SSH2\_MSG\_NEWKEYS received\r\ndebug2: set\_newkeys: mode 0\r\ndebug1: rekey in after 134217728 blocks\r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_dsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ecdsa \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_ed25519 \r\ndebug1: Will attempt key: /Users/tonywong/.ssh/id\_xmss \r\ndebug2: pubkey\_prepare: done\r\ndebug3: send packet: type 5\r\ndebug3: receive packet: type 7\r\ndebug1: SSH2\_MSG\_EXT\_INFO received\r\ndebug1: kex\_input\_ext\_info: server-sig-algs=\<rsa-sha2-256,rsa-sha2-512\>\r\ndebug3: receive packet: type 6\r\ndebug2: service\_accept: ssh-userauth\r\ndebug1: SSH2\_MSG\_SERVICE\_ACCEPT received\r\ndebug3: send packet: type 50\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug3: start over, passed a different list publickey,password\r\ndebug3: preferred gssapi-with-mic,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_lookup publickey\r\ndebug3: remaining preferred: ,gssapi-keyex,hostbased,publickey\r\ndebug3: authmethod\_is\_enabled publickey\r\ndebug1: Next authentication method: publickey\r\ndebug1: Offering public key: /Users/tonywong/.ssh/id\_rsa RSA SHA256:v/ug+7JK7zhbT2Woc7P5QiB5VqVrml5UXV8lDU+7L/8\r\ndebug3: send packet: type 50\r\ndebug2: we sent a publickey packet, wait for reply\r\ndebug3: receive packet: type 51\r\ndebug1: Authentications that can continue: publickey,password\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_dsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_dsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ecdsa\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ecdsa: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_ed25519\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_ed25519: No such file or directory\r\ndebug1: Trying private key: /Users/tonywong/.ssh/id\_xmss\r\ndebug3: no such identity: /Users/tonywong/.ssh/id\_xmss: No such file or directory\r\ndebug2: we did not send a packet, disable method\r\ndebug1: No more authentication methods to try.\r[ntonywong@192.168.0.151]([mailto:ntonywong@192.168.0.151](mailto:ntonywong@192.168.0.151)): Permission denied (publickey,password).”,  
“unreachable”: true  
}  
(ansible) Tonys-MacBook-Pro:ansible tonywong$

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 20, 2020, 10:54pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/6 "2020-07-20T22:54:44Z")

</div>

ansible -m ping -i hosts all  
ansible\_ssh\_private\_key=~/.vagrant.d/insecure\_private\_key | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: ssh: Could not resolve hostname ansible\_ssh\_private\_key=~/.vagrant.d/insecure\_private\_key: nodename nor servname provided, or not known”,  
“unreachable”: true  
}  
ansible\_connection=ssh | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: ssh: Could not resolve hostname ansible\_connection=ssh: nodename nor servname provided, or not known”,  
“unreachable”: true  
}  
ansible\_ssh\_user=vagrant | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: ssh: Could not resolve hostname ansible\_ssh\_user=vagrant: nodename nor servname provided, or not known”,  
“unreachable”: true  
}  
ansible\_ssh\_pass=vagrant | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: ssh: Could not resolve hostname ansible\_ssh\_pass=vagrant: nodename nor servname provided, or not known”,  
“unreachable”: true  
}  
192.168.0.127 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: [tonywong@192.168.0.127](mailto:tonywong@192.168.0.127): Permission denied (publickey,password).”,  
“unreachable”: true  
}  
192.168.0.151 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: [tonywong@192.168.0.151](mailto:tonywong@192.168.0.151): Permission denied (publickey,password).”,  
“unreachable”: true  
}

My hosts file

ansible\_ssh\_pass=vagrant  
ansible\_ssh\_private\_key=~/.vagrant.d/insecure\_private\_key

[servers]  
192.168.0.127  
192.168.0.151

---

<div class="post-metadata">

**Author:** ![jolleye](https://avatars.discourse-cdn.com/v4/letter/j/47e85d/32.png) [@jolleye](https://forum.ansible.com/u/jolleye)\
**Post date:** [July 20, 2020, 11:08pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/7 "2020-07-20T23:08:26Z")

</div>

Please try this (below) in your inventory file. In the INI inventory file format, that’s how variables that apply to a group are declared.

[servers]  
192.168.0.127  
192.168.0.151

[servers:vars]  
ansible\_ssh\_pass=vagrant  
ansible\_ssh\_private\_key=~/.vagrant.d/insecure\_private\_key

---

<div class="post-metadata">

**Author:** ![jolleye](https://avatars.discourse-cdn.com/v4/letter/j/47e85d/32.png) [@jolleye](https://forum.ansible.com/u/jolleye)\
**Post date:** [July 21, 2020, 12:07am UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/8 "2020-07-21T00:07:17Z")

</div>

Also, check this YouTube video by Jeff Geerling that covers inventory files and Vagrant:  
[https://youtu.be/7kVfqmGtDL8?t=1226](https://youtu.be/7kVfqmGtDL8?t=1226) (builds an inventory)  
[https://youtu.be/7kVfqmGtDL8?t=601](https://youtu.be/7kVfqmGtDL8?t=601) (builds a Vagrantfile)

I highly recommend watching his whole Ansible 101 series and getting his book (Ansible for DevOps: [https://www.ansiblefordevops.com](https://www.youtube.com/redirect?v=sb5XYD3BLMA&redir_token=QUFFLUhqbnAzWFFwdGVDNC04b1VqcUplZWpOS0JsSUs2Z3xBQ3Jtc0tsc0xlVG01cjdxcFdrTXhXdHE1TWN3Mi1EVDF3YWxIczQ5MktyUzl0a2JPeGprTmtWWkQ0Ui1YTlhlUnI3Y2JET2hIOW51MDFHQkp6T3g0LS10R0xYMWNUUHFBbENZQlNOeDVfTzBFSDRMLWphVFpxZw%3D%3D&event=video_description&q=https%3A%2F%2Fwww.ansiblefordevops.com)) as well.

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 1:40am UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/9 "2020-07-21T01:40:50Z")

</div>

Thanks

now getting a different message

(ansible) Tonys-MacBook-Pro:ansible tonywong$ ansible -m ping -i hosts servers  
192.168.0.127 | FAILED! =\> {  
“msg”: “to use the ‘ssh’ connection type with passwords, you must install the sshpass program”  
}  
192.168.0.151 | FAILED! =\> {  
“msg”: “to use the ‘ssh’ connection type with passwords, you must install the sshpass program”  
}

---

<div class="post-metadata">

**Author:** ![jolleye](https://avatars.discourse-cdn.com/v4/letter/j/47e85d/32.png) [@jolleye](https://forum.ansible.com/u/jolleye)\
**Post date:** [July 21, 2020, 4:17am UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/10 "2020-07-21T04:17:21Z")

</div>

Please change ansible\_ssh\_pass=vagrant to ansible\_ssh\_user=vagrant

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 5:05am UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/11 "2020-07-21T05:05:32Z")

</div>

thanks for catching that. now getting this

192.168.0.127 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: ssh: connect to host 192.168.0.127 port 22: Operation not permitted”,  
“unreachable”: true  
}  
192.168.0.151 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: ssh: connect to host 192.168.0.151 port 22: Operation not permitted”,  
“unreachable”: true  
}

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 2:03pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/12 "2020-07-21T14:03:09Z")

</div>

I dont understand now I am seeing this

(ansible) Tonys-MacBook-Pro:ansible tonywong$ ansible -m ping -i hosts servers  
The authenticity of host ‘192.168.0.99 (192.168.0.99)’ can’t be established.  
ECDSA key fingerprint is SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg.  
Are you sure you want to continue connecting (yes/no/[fingerprint])?

below is my hosts file

why is it asking me for this?

[servers]  
192.168.0.99

[servers:vars]  
ansible\_ssh\_user=vagrant  
ansible\_ssh\_private\_key=~/.vagrant.d/insecure\_private\_key

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 2:07pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/13 "2020-07-21T14:07:10Z")

</div>

didnt think I needed to do this but using -u gives permission denied

ansible) Tonys-MacBook-Pro:ansible tonywong$ ansible -m ping -i hosts servers -u vagrant  
192.168.0.99 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: [vagrant@192.168.0.99](mailto:vagrant@192.168.0.99): Permission denied (publickey,password).”,  
“unreachable”: true  
}

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 2:10pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/14 "2020-07-21T14:10:58Z")

</div>

(ansible) Tonys-MacBook-Pro:ansible tonywong$ ansible -m ping -i hosts all -vvv  
ansible 2.9.10  
config file = None  
configured module search path = [‘/Users/tonywong/.ansible/plugins/modules’, ‘/usr/share/ansible/plugins/modules’]  
ansible python module location = /Users/tonywong/virtualenv/ansible/lib/python3.7/site-packages/ansible  
executable location = /Users/tonywong/virtualenv/ansible/bin/ansible  
python version = 3.7.7 (default, Mar 10 2020, 15:43:03) [Clang 11.0.0 (clang-1100.0.33.17)]  
No config file found; using defaults  
host\_list declined parsing /Users/tonywong/virtualenv/ansible/hosts as it did not pass its verify\_file() method  
script declined parsing /Users/tonywong/virtualenv/ansible/hosts as it did not pass its verify\_file() method  
auto declined parsing /Users/tonywong/virtualenv/ansible/hosts as it did not pass its verify\_file() method  
Parsed /Users/tonywong/virtualenv/ansible/hosts inventory source with ini plugin  
META: ran handlers  
\<192.168.0.99\> ESTABLISH SSH CONNECTION FOR USER: vagrant  
\<192.168.0.99\> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ‘User=“vagrant”’ -o ConnectTimeout=10 -o ControlPath=/Users/tonywong/.ansible/cp/f877efebcb 192.168.0.99 ‘/bin/sh -c ‘"’“‘echo ~vagrant && sleep 0’”’"‘’  
\<192.168.0.99\> (255, b’‘, [b’vagrant@192.168.0.99](mailto:b%27vagrant@192.168.0.99): Permission denied (publickey,password).\r\n’)  
192.168.0.99 | UNREACHABLE! =\> {  
“changed”: false,  
“msg”: “Failed to connect to the host via ssh: [vagrant@192.168.0.99](mailto:vagrant@192.168.0.99): Permission denied (publickey,password).”,  
“unreachable”: true  
}

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 3:00pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/15 "2020-07-21T15:00:07Z")

</div>

i checked my insecure\_private\_key and it works fine by logging via ssh

ssh -i ~/.vagrant.d/insecure\_private\_key [vagrant@192.168.0.99](mailto:vagrant@192.168.0.99)

but ansible is not working

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 3:09pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/16 "2020-07-21T15:09:33Z")

</div>

ok finally got it working

I am on ansible 2.9 and had to change

ansible\_ssh\_user to ansible\_user

and

ansible\_ssh\_private\_key to

ansible\_ssh\_private\_key\_file

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 3:52pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/17 "2020-07-21T15:52:43Z")

</div>

I am still getting this on first connect  
The authenticity of host ‘192.168.0.97 (192.168.0.97)’ can’t be established.  
ECDSA key fingerprint is SHA256:7qu28ehihcaflJvAR+UT9g4bAK4khkIh1gAZluMC1fg.  
Are you sure you want to continue connecting (yes/no/[fingerprint])?

once I accept it goes through. why?

---

<div class="post-metadata">

**Author:** ![Tony\_Wong](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tony\_Wong](https://forum.ansible.com/u/Tony_Wong)\
**Post date:** [July 21, 2020, 4:04pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/18 "2020-07-21T16:04:30Z")

</div>

ok got it with this line

ansible\_ssh\_common\_args=‘-o StrictHostKeyChecking=no’

---

<div class="post-metadata">

**Author:** ![Mahesh\_N](https://avatars.discourse-cdn.com/v4/letter/m/977dab/32.png) [@Mahesh\_N](https://forum.ansible.com/u/Mahesh_N)\
**Post date:** [July 21, 2020, 9:26pm UTC](https://forum.ansible.com/t/authenticity-of-host-cant-be-established/33435/19 "2020-07-21T21:26:47Z")

</div>

Just adding:  
Make sure you login from the user which you have created the keys from …

And added the keys for the user vagrant only.