search

patricegautier / unifiZabbix

Zabbix templates to monitor pretty much all Unifi devices
183 stars 36 forks source link

Ubuntu 20.04 libssh - fix with PPA does not work anymore #62

Closed zpolisensky closed 2 years ago

zpolisensky commented 2 years ago

Hi @patricegautier ,

this is just FYI that Ubuntu 20.04 libssh fix 'In Ubuntu 20.04 the "ssh.run" key does not work with the standard libssh. Just install the latest version from https://launchpad.net/~kedazo/+archive/ubuntu/libssh-0.7.x and everything is OK.' does not work anymore because libssh library in this repository was upgraded to 0.10.x and this version doesn't support weak encryption algorithms used by some Unifi devices (like APs). Possible solution is to upgrade from Ubuntu 20.04 to 22.04 where is libssh-0.9.6 by default and that works fine.

Thanks Zbynek

patricegautier commented 2 years ago

Hi Zbynek,

Thanks for the heads up,

Presumably RSA support for ssh can still be turned on by configuration with libssh 0.10.x, it’s just off by default right?

-P

On Sep 25, 2022, at 4:35 AM, zpolisensky @.***> wrote:

Hi @patricegautier https://github.com/patricegautier ,

this is just FYI that Ubuntu 20.04 libssh fix 'In Ubuntu 20.04 the "ssh.run" key does not work with the standard libssh. Just install the latest version from https://launchpad.net/~kedazo/+archive/ubuntu/libssh-0.7.x and everything is OK.' does not work anymore because libssh library in this repository was upgraded to 0.10.x and this version doesn't support weak encryption algorithms used by some Unifi devices (like APs). Possible solution is to upgrade from Ubuntu 20.04 to 22.04 where is libssh-0.9.6 by default and that works fine.

Thanks Zbynek

— Reply to this email directly, view it on GitHub https://github.com/patricegautier/unifiZabbix/issues/62, or unsubscribe https://github.com/notifications/unsubscribe-auth/AJFHTJY76Y5U4TOZ6WEFP33WAA2J5ANCNFSM6AAAAAAQVBWJXY. You are receiving this because you were mentioned.

zpolisensky commented 2 years ago

Hi Patrice, to be honest, I don't know if it has been removed completely or just disabled and can be re-enabled by some configuration. I just upgraded my server to Ubuntu 22.04 with libssh 0.9.6 to fix that issue. Here is Zabbix error with libssh 0.10.3: Cannot establish SSH session: kex error : no match for method server host key algo: server [ssh-rsa,ssh-dss], client [rsa-sha2-512,rsa-sha2-256,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256]

Thanks Zbynek

patricegautier commented 2 years ago

BTW I will mention that for those items that use the external scripts, I added

-o PubkeyAcceptedKeyTypes=+ssh-rsa -o HostKeyAlgorithms=+ssh-rsa

to SSH invocation to deal with this.. So only items that use ssh.run are affected as of now..