Linux discovery failure with access denied error

  • 7018128
  • 06-Oct-2016
  • 07-Oct-2016

Environment


NetIQ PlateSpin Migrate
NetIQ PlateSpin Protect
NetIQ PlateSpin Forge

Situation

This article discusses information regarding following error: 

Unhandled Exception: Exception: Failed: uname -q ---> PlateSpin.OperationsFramwork.PlateSpinException: Access denied to SSH server on x.x.x.x when connecting as serveradmin ---> Maverick.SSH.SSHException: Failed to negotiate a transport component [3des-cbc] [aes256-ctr]..........

When performing discovery on a Linux workload

Resolution

We currently only have a work around:

comment out all cipher related line in /etc/ssh/sshd_config, for example:

 # default is aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,
 # aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,
 # aes256-cbc,arcfour

Then re-start sshd: 

/etc/init.d/sshd restart


Cause

Customer tightened ssl security by removing some ssl ciphers.

Additional Information

As per development, currently supported cipher by PlateSpin:

3des-cbc
blowfish128-cbc
aes128-cbc
aes192-cbc
aes256-cbc
cast128-cbc
serpent128-cbc
serpent192-cbc
serpent256-cbc
twofish128-cbc
twofish192-cbc
twofish256-cbc