ansible的Q&A:Failed to connect to the host via ssh: ssh_exchange_identification和Authentication or per

最新推荐文章于 2025-05-23 18:34:46 发布

xiaofang2015

最新推荐文章于 2025-05-23 18:34:46 发布

阅读量1.1w

点赞数

CC 4.0 BY-SA版权

分类专栏：环境 linux

本文链接：https://blog.youkuaiyun.com/xiaofang2015/article/details/82685680

linux 同时被 2 个专栏收录

15 篇文章

订阅专栏

环境

8 篇文章

订阅专栏

本文档记录了Ansible在使用过程中遇到的一些典型错误及其解决办法，包括连接失败、认证失败等问题，并提供了详细的定位和解决方案。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

本文档记录ansible使用中遇到的错误及解决办法

问题一：

[root@host-10-1-241-158 logs]# ssh 10.1.241.161

ssh_exchange_identification: read: Connection reset by peer

ips10.1.241.159 | UNREACHABLE! => {

"changed": false,

"msg": "Failed to connect to the host via ssh: ssh_exchange_identification: read: Connection reset by peer\r\n",

"unreachable": true

}

[root@host-10-1-241-158 logs]# ansible root10.1.241.161 -m shell -a 'pwd'

root10.1.241.161 | FAILED | rc=0 >>

MODULE FAILURE

[root@host-10-1-241-158 logs]# ansible ips10.1.241.161 -m shell -a 'pwd'

ips10.1.241.161 | UNREACHABLE! => {

"changed": false,

"msg": "Authentication failure.",

"unreachable": true

}

定位是因为：

10.1.241.161主机上

vi /etc/hosts.deny

有sshd,sftp,telnet,ftp: 10.1.241.158

如何解除/etc/hosts.deny

161上执行：

[root@host-10-1-241-161 ~]# service denyhosts stop

sent DenyHosts SIGTERM

vi /etc/hosts.deny中，删除对应的主机信息

Authentication failure."报错是因为：/etc/ansible/hosts的用户，在被连接主机上没有sudo权限：

vi /etc/sudoers

添加对应权限即可。

Ansible报错："Failed to connect to the host via ssh: ssh_exchange_identification: read: Connection reset by peer\r\n"

ips10.1.241.159 | UNREACHABLE! => {

"changed": false,

"msg": "Failed to connect to the host via ssh: ssh_exchange_identification: read: Connection reset by peer\r\n",

"unreachable": true

}

解决方法：

service denyhosts stop

cat /dev/null >/etc/hosts.deny

问题二：

ansible执行报错：Authentication or permission failure

+ ansible IPSMachines -m shell -a 'pwd'

root10.1.235.28 | UNREACHABLE! => {

"changed": false,

"msg": "Authentication or permission failure. In some cases, you may have been able to authenticate and did not have permissions on the remote directory. Consider changing the remote temp path in ansible.cfg to a path rooted in \"/tmp\". Failed command was: ( umask 77 && mkdir -p \"` echo $HOME/.ansible/tmp/ansible-tmp-1536806706.35-106960540689166 `\" && echo ansible-tmp-1536806706.35-106960540689166=\"` echo $HOME/.ansible/tmp/ansible-tmp-1536806706.35-106960540689166 `\" ), exited with result 1",

"unreachable": true

}

root10.1.235.27 | UNREACHABLE! => {

"changed": false,

"msg": "Authentication or permission failure. In some cases, you may have been able to authenticate and did not have permissions on the remote directory. Consider changing the remote temp path in ansible.cfg to a path rooted in \"/tmp\". Failed command was: ( umask 77 && mkdir -p \"` echo $HOME/.ansible/tmp/ansible-tmp-1536806706.35-1073010745840 `\" && echo ansible-tmp-1536806706.35-1073010745840=\"` echo $HOME/.ansible/tmp/ansible-tmp-1536806706.35-1073010745840 `\" ), exited with result 1",

"unreachable": true

}

【定位】原因是，被登录主机上的ansible用户的密码不对了；或者密码过期了；修改下对应用户的密码为正确密码即可；