-
Bug
-
Resolution: Incomplete
-
Blocker
-
None
Description: I have a problem to use the private key from my credential to establish ssh connection on my remote server.
when i use physique private key stocked on my server the ssh connection is well done , but when i use sshagent to get the private key form the credential which have the same key (allready verified) the connection is failed.
/!\ i'm using sshagent in the groovy pipeline because i need to use differents credentials :
stage { steps { sshagent (credentials: ['f6cd2c20-74c6-48c1-b728-cce2b7c99687']) \{ dir("${PLAY_PATH}") { ansiblePlaybook( colorized: true, installation: 'ansible', playbook: 'deploy_dc.yaml', hostKeyChecking: false, extras: '-vvvv', extraVars: [ USER: "${USER_ID}", application: "${Application}" ] ) } } } } {color:#de350b}*ERROR:*{color} ssh-agent] Using credentials jenkins [ssh-agent] Looking for ssh-agent implementation... [ssh-agent] Exec ssh-agent (binary ssh-agent on a remote machine) $ ssh-agent SSH_AUTH_SOCK=/tmp/ssh-YIpaWLmGXvTs/agent.96914 SSH_AGENT_PID=96918 Running ssh-add (command line suppressed) Identity added: /app/list/jenkins/workspace/VFI_SILO1_ETAT_TEST@tmp/private_key_5247074270144721685.key (/app/list/jenkins/workspace/VFI_SILO1_ETAT_TEST@tmp/private_key_5247074270144721685.key) [ssh-agent] Started. [Pipeline] { [Pipeline] dir Running in /app/list/ansible/Ansible [Pipeline] { [Pipeline] ansiblePlaybook [AnsibleCAGIP] $ ansible-playbook deploy_dc.yaml -e USER=jenkins -e application=wn --vvvv ansible-playbook 2.4.2.0 config file = /app/list/ansible/Ansible/configuration/ansible_LR023MID.cfg configured module search path = [u'/app/list/home/dcexploit/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 2.7.5 (default, Mar 26 2019, 22:13:06) [GCC 4.8.5 20150623 (Red Hat 4.8.5-36)] Using /app/list/ansible/AnsibleCAGIP/configuration/ansible_LR023MID.cfg as config file setting up inventory plugins Parsed /app/list/ansible/AnsibleCAGIP/configuration/hosts_LR023MID inventory source with ini plugin Loading callback plugin debug of type stdout, v2.0 from /usr/lib/python2.7/site-packages/ansible/plugins/callback/__init__.pyc PLAYBOOK: deploy_dc.yaml ******************************************************* 1 plays in deploy_dc.yaml PLAY [wn.s1n.integration.stop] ************************************************* Read vars_file 'group_vars/all' TASK [Gathering Facts] ********************************************************* Using module file /usr/lib/python2.7/site-packages/ansible/modules/system/setup.py <10.186.xx.xx> ESTABLISH SSH CONNECTION FOR USER: jenkins <10.186.xx.xx> SSH: EXEC ssh -vvv -E /app/list/ansible/Ansible/key/log -o GSSAPIAuthentication=yes -o UserKnownHostsFile=/app/list/ansible/Ansible/configuration/known_hosts_LR023MID -o User=jenkins -o StrictHostKeyChecking=no -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=jenkins -o ConnectTimeout=10 10.186.xx.xx '/bin/sh -c '"'"'/usr/bin/python && sleep 0'"'"'' fatal: [ANS_IAOXAS01]: UNREACHABLE! => { "changed": false, "unreachable": true } MSG: SSH Error: data could not be sent to remote host "10.186.xx.xx". Make sure this host can be reached over ssh PLAY RECAP ********************************************************************* ANS_IAOXAS01 : ok=0 changed=0 unreachable=1 failed=0 {color:#de350b}*SSH LOGS:*{color} debug2: we did not send a packet, disable method debug3: authmethod_lookup gssapi-keyex debug3: remaining preferred: hostbased,publickey debug3: authmethod_is_enabled gssapi-keyex debug1: Next authentication method: gssapi-keyex debug1: No valid Key exchange context debug2: we did not send a packet, disable method debug3: authmethod_lookup publickey debug3: remaining preferred: ,publickey debug3: authmethod_is_enabled publickey debug1: Next authentication method: publickey debug1: Trying private key: /app/list/jenkins/workspace/VFI_SILO1_ETAT_TEST@tmp/private_key_5247074270144721685.key debug3: sign_and_send_pubkey: RSA SHA256:Rq+xWY9mwHUiwxVI63nFd1slCcSZ82+lABDE8GeLOMI debug3: send packet: type 50 debug2: we sent a publickey packet, wait for reply debug3: receive packet: type 51 debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive debug1: Offering public key: RSA SHA256:foFkT1HgRoCQr1nsrsDix7MixqmER/sJ2ZU42hvO+1M /etc/ssh/identity/dcexploit debug3: send_pubkey_test debug3: send packet: type 50 debug2: we sent a publickey packet, wait for reply debug3: receive packet: type 51 debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password,keyboard-interactive debug1: Offering public key: RSA-CERT SHA256:foFkT1HgRoCQr1nsrsDix7MixqmER/sJ2ZU42hvO+1M /etc/ssh/identity/dcexploit debug3: send_pubkey_test debug3: send packet: type 50