无法从ansible到远程主机的ssh

Question

我正试图在远程主机上运行一本ansible的剧本。但是登录的第一步并没有发生。试过以下几点：

• 使用远程主机凭据更新ansible/ host文件
• 添加host_key_checking=false
• 在sshd_config文件中，我设置了ChallengeResponseAuthentication =yes (并重新启动ssh)
• 不可接受版本为2.3

产出：

fatal: [10.236.155.69]: UNREACHABLE! => {
    "changed": false,
    "msg": "Failed to connect to the host via ssh: 
    @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
    @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
    IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
    Someone could be eavesdropping on you right now (man-in-the-middle attack)!
    It is also possible that a host key has just been changed.
    The fingerprint for the ECDSA key sent by the remote host is\n47:0a:1a:05:f2:49:1e:cc:99:2a:47:d8:67:4f:4c:2e.
    Please contact your system administrator.
    Add correct host key in /root/.ssh/known_hosts to get rid of this message.
    Offending ECDSA key in /root/.ssh/known_hosts:2
      remove with: ssh-keygen -f \"/root/.ssh/known_hosts\" -R 10.236.155.69
    Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
    Permission denied (publickey,password,keyboard-interactive).
    ",
    "unreachable": true
}

Answer 1

如果是您的主机，您应该从第2行的/root/. SSH /已知_ host中删除SSH指纹，可以使用命令：ssh-keygen -f \"/root/.ssh/known_hosts\" -R 10.236.155.69或使用任何文本编辑器手动删除它。这是由重新安装服务器导致重新生成SSH指纹引起的。如果您不对此主机做任何事情，这可能是安全问题。