Satellite fails to execute ansible commands when connected to ipa server

Environment

• Red Hat Satellite 6.4+

Issue

• Remote execution with Ansible fails with error "Failed to connect to the host via ssh: ssh_exchange_identification: Connection closed by remote host"
• Remote execution with SSH works fine

Resolution

• Red Hat is aware of this issue and is planning to resolve this in a future version of Satellite 6
• Please open a This content is not included.support case with Red Hat Technical Support if this issue is impacting your environment

Work around:

• As a workaround edit /etc/ssh/ssh_config and comment the following line:

  ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h
  

  to

  #ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h
  

• For more KB articles/solutions related to Red Hat Satellite 6.x Remote Execution Issues, refer to the Red Hat Satellite Consolidated Troubleshooting Article for Red Hat Satellite 6.x Remote Execution Issues

Root Cause

• As part of the IPA client installation, this line of configuration is added but interferes with the Ansible integration of Satellite 6.

• The root cause for this issue is currently under investigation in This content is not included.bugzilla 1650103.

Diagnostic Steps

• The error can be seen in /var/log/foreman/production.log and in the failed Satellite task.

  `Failed to connect to the host via ssh: ssh_exchange_identification: Connection closed by remote host ` 
  

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.