# unable to ssh host from ansible with "ansible\_ssh\_common\_arg" **URL:** \ **Category:** Ansible Project\ **Tags:** ubuntu\ **Created:** [March 19, 2021, 8:09am UTC](https://forum.ansible.com/t/unable-to-ssh-host-from-ansible-with-ansible-ssh-common-arg/34806 "2021-03-19T08:09:34Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Bharath\_Achar](https://avatars.discourse-cdn.com/v4/letter/b/e36b37/32.png) [@Bharath\_Achar](https://forum.ansible.com/u/Bharath_Achar)\ **Post date:** [March 19, 2021, 8:09am UTC](https://forum.ansible.com/t/unable-to-ssh-host-from-ansible-with-ansible-ssh-common-arg/34806/1 "2021-03-19T08:09:34Z")
Hi, cat /etc/ansible/hosts | grep dummy | grep ssh dummy ansible\_host=10.xx.xx.xx ansible\_ssh\_common\_arg=“-o HostKeyAlgorithms=+ssh-dss” when i try to execute against this host, I get this error. ansible-playbook pre-prod\_yaml\_reconfig\_12Mar2021.yml -vvvv Using /etc/ansible/ansible.cfg as config file Loaded callback skippy of type stdout, v2.0 1 plays in pre-prod\_yaml\_reconfig\_12Mar2021.yml PLAY [Update Newrelic yaml configuration files] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* TASK [setup] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* \<10.xx.xx.xx\> ESTABLISH SSH CONNECTION FOR USER: None \<10.xx.xx.xx\> SSH: EXEC ssh -C -vvv -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o ConnectTimeout=10 -o ControlPath=/root/.ansible/cp/ansible-ssh-%h-%p-%r -tt 10.xx.xx.xx ‘( umask 22 && mkdir -p “$( echo $HOME/.ansible/tmp/ansible-tmp-1616140934.23-183416823411944 )” && echo “$( echo $HOME/.ansible/tmp/ansible-tmp-1616140934.23-183416823411944 )” )’ fatal: [dummy]: UNREACHABLE! =\> {“changed”: false, “msg”: “ERROR! SSH encountered an unknown error. The output was:\nOpenSSH\_7.2p2 Ubuntu-4ubuntu2.8, OpenSSL 1.0.2g 1 Mar 2016\r\ndebug1: Reading configuration data /etc/ssh/ssh\_config\r\ndebug1: /etc/ssh/ssh\_config line 19: Applying options for \*\r\ndebug1: auto-mux: Trying existing master\r\ndebug1: Control socket "/root/.ansible/cp/ansible-ssh-10.xx.xx.xx-22-root" does not exist\r\ndebug2: resolving "10.xx.xx.xx" port 22\r\ndebug2: ssh\_connect\_direct: needpriv 0\r\ndebug1: Connecting to 10.xx.xx.xx [10.xx.xx.xx] port 22.\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: fd 3 clearing O\_NONBLOCK\r\ndebug1: Connection established.\r\ndebug3: timeout: 9999 ms remain after connect\r\ndebug1: permanently\_set\_uid: 0/0\r\ndebug1: identity file /root/.ssh/id\_rsa type 1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_rsa-cert type -1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_dsa type -1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_dsa-cert type -1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_ecdsa type -1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_ecdsa-cert type -1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_ed25519 type -1\r\ndebug1: key\_load\_public: No such file or directory\r\ndebug1: identity file /root/.ssh/id\_ed25519-cert type -1\r\ndebug1: Enabling compatibility mode for protocol 2.0\r\ndebug1: Local version string SSH-2.0-OpenSSH\_7.2p2 Ubuntu-4ubuntu2.8\r\ndebug1: Remote protocol version 2.0, remote software version ReflectionForSecureIT\_7.2.1.99\r\ndebug1: no match: ReflectionForSecureIT\_7.2.1.99\r\ndebug2: fd 3 setting O\_NONBLOCK\r\ndebug1: Authenticating to 10.xx.xx.xx:22 as ‘root’\r\ndebug3: hostkeys\_foreach: reading file "/root/.ssh/known\_hosts"\r\ndebug3: record\_hostkey: found key type RSA in file /root/.ssh/known\_hosts:222\r\ndebug3: load\_hostkeys: loaded 1 keys from 10.xx.xx.xx\r\ndebug3: order\_hostkeyalgs: prefer hostkeyalgs: [ssh-rsa-cert-v01@openssh.com](mailto:ssh-rsa-cert-v01@openssh.com),rsa-sha2-512,rsa-sha2-256,ssh-rsa\r\ndebug3: send packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT sent\r\ndebug3: receive packet: type 20\r\ndebug1: SSH2\_MSG\_KEXINIT received\r\ndebug2: local client KEXINIT proposal\r\ndebug2: KEX algorithms: [curve25519-sha256@libssh.org](mailto:curve25519-sha256@libssh.org),ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,ext-info-c\r\ndebug2: host key algorithms: [ssh-rsa-cert-v01@openssh.com](mailto:ssh-rsa-cert-v01@openssh.com),rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519\r\ndebug2: ciphers ctos: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc\r\ndebug2: ciphers stoc: [chacha20-poly1305@openssh.com](mailto:chacha20-poly1305@openssh.com),aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc\r\ndebug2: MACs ctos: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: MACs stoc: [umac-64-etm@openssh.com](mailto:umac-64-etm@openssh.com),umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1\r\ndebug2: compression ctos: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: compression stoc: [zlib@openssh.com](mailto:zlib@openssh.com),zlib,none\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug2: peer server KEXINIT proposal\r\ndebug2: KEX algorithms: diffie-hellman-group14-sha1,diffie-hellman-group1-sha1\r\ndebug2: host key algorithms: ssh-dss\r\ndebug2: ciphers ctos: aes128-ctr,aes128-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc,blowfish-cbc,3des-cbc,cast128-cbc,arcfour,arcfour128,arcfour256\r\ndebug2: ciphers stoc: aes128-ctr,aes128-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc,blowfish-cbc,3des-cbc,cast128-cbc,arcfour,arcfour128,arcfour256\r\ndebug2: MACs ctos: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96\r\ndebug2: MACs stoc: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96\r\ndebug2: compression ctos: [none,zlib@openssh.com](mailto:none,zlib@openssh.com),zlib\r\ndebug2: compression stoc: [none,zlib@openssh.com](mailto:none,zlib@openssh.com),zlib\r\ndebug2: languages ctos: \r\ndebug2: languages stoc: \r\ndebug2: first\_kex\_follows 0 \r\ndebug2: reserved 0 \r\ndebug1: kex: algorithm: diffie-hellman-group14-sha1\r\ndebug1: kex: host key algorithm: (no match)\r\nUnable to negotiate with 10.xx.xx.xx port 22: no matching host key type found. Their offer: ssh-dss\r\n”, “unreachable”: true} PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* dummy : ok=0 changed=0 unreachable=1 failed=0 the same command with ssh works fine and I’m able to login - ssh -oHostKeyAlgorithms=+ssh-dss 10.xx.xx.xx my ansible version root@bastionhost:/ansible/projects/newrelic# ansible --version ansible 2.0.0.2 config file = /etc/ansible/ansible.cfg configured module search path = Default w/o overrides root@bastionhost:/ansible/projects/newrelic# ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [March 19, 2021, 2:32pm UTC](https://forum.ansible.com/t/unable-to-ssh-host-from-ansible-with-ansible-ssh-common-arg/34806/2 "2021-03-19T14:32:25Z")
ansible\_ssh\_common\_args \<= plural, you are missing an 's'