I have two nodes out of 25 with "can't establish SSH connection."

skreemer commented 3 years ago

As seen below, this is node10 of 25, all of them with exception of 2 complete. The 2 that do not complete give more or less the same error:

Action: NODE REQUEST Task backup, node 10: can't establish SSH connection. Schedule id: NONE Task name: backup Node id: 10 Worker id: 1 Exception: JSchException. Message: Algorithm negotiation fail Stack trace: com.jcraft.jsch.Session.receive_kexinit(Session.java:583) com.jcraft.jsch.Session.connect(Session.java:320) ssh.GeneralSsh.performJobs(GeneralSsh.java:385) ssh.GeneralSsh.execute(GeneralSsh.java:105) core.WorkerSsh.executeJobs(WorkerSsh.java:74) abstractions.AbstractWorker.call(AbstractWorker.java:89) abstractions.AbstractWorker.call(AbstractWorker.java:48) java.util.concurrent.FutureTask.run(FutureTask.java:266) java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) java.lang.Thread.run(Thread.java:748)

I've tried looking through logs to pick out the negotiation issue to no avail and I can log into the node with the same credentials from the server running Cbackup by manually using ssh. Any assistance would be greatly appreciated.

skreemer commented 3 years ago

I've figured out the the jsch version I have and the ASAv I have cannot negotiate the SSH encap and cipher set. I'm attempting to figure out how to increase the range of the allowed cipher sets. There's a few folks suggesting to update the KexAlgorithms in /etc/ssh/sshd_config, but even after restarting the sshd service it's still not allowing the connection, but only in cbackup.

slimix00 commented 2 years ago

Hello,

For me, in CENTOS the issue has been solved by restarting the sshd deamon with the following command : systemctl restart sshd

Good luck to everyone.

Kind regards,

cBackup / main

I have two nodes out of 25 with "can't establish SSH connection." #63