SSH no matching key type found while running Ansible Job on RHEL/Centos 6 servers

Archives AWX Project
, ,
1

Hi All,
While running any Ansible job on AWX Tower, I get the following error “Failed to connect to host via SSH. Unable to negotiate with . No matching host key type found. Their offer: ssh-rsa, ssh-dss”, unreachable": true

This is happening only for RHEL 6.x & CentOS 6.x hosts. The same playbook works just fine for RHEL7 & RHEL 8 hosts. I searched and couldn’t find an ansible.cfg file on the awx-web or awx-ee container

I am running AWX version 21.14 deployed using k3s cluster
version of ansible running on awx-ee container is: Ansible core 2.14

Is there an environmental variable that can be set in AWX Job settings or is there any other way to ensure Host key checking is ignored completely for EL6 systems?

Looking forward to your update and leads on this. I am stuck and cannot optimally execute playbooks owing to this issue.

Rgds,
Kunal

(attachments)

Screenshot_1.png
Screenshot_1.png1485×288 25.7 KB

2

The ssh-rsa algorithm was deprecated in OpenSSH some time ago as it is considered to be insecure.
We have had a similar issue with Debian 8 hosts.
We got around the issue by adding the following to the local ssh config
Host *
PubkeyAcceptedKeyTypes +ssh-rsa
Not really recommended but it works!
Not sure how this could be implemented in AWX.

If you can update the RHEL/CentOS 6 hosts, that would be the way to go.

3

Hi,
Can someone kindly provide leads on this. Has anyone experienced this behavior earlier??

Rgds,
Kunal