Re: [Fab-user] Fatal error: Incompatible ssh server

[Jeff Forcier]

Hi Randy,

Sorry to hear about your troubles. As you've probably guessed, this
does seem like a Paramiko/SSH issue -- Fabric doesn't really do
anything special at the SSH level, instead relying on Paramiko.

I personally have never used Solaris so I have no idea whether this is
a blanket "Solaris' SSH server implementation just won't work with
Paramiko", or what. Hopefully if there are Solaris users on the list
(I don't remember offhand if we have any) they'll be able to shed some
light on that.

Stupid question, but did you search the Paramiko list archives yet?
They're publicly available and it's remotely possible the issue has
come up for others before.

Otherwise, I'll just have to wish you luck getting through the
moderation on the Paramiko list :( Sorry I can't be of more help.

Best,
Jeff


On Wed, Jan 20, 2010 at 12:11 PM, Randy Karels <address@hidden> wrote:
> Hello all,
>
> I'm new to fabric and ssh, so I'm sure I'm missing something quite basic.
>
> I'm on osx 10.6 running python 2.6. I installed fabric 0.9 using pip,
> and it said everything was installed successfully. The server is
> running solaris. I'm able to connect without problem using the normal
> ssh commands. My private key is protected with a password, if that
> makes a difference.
>
> Trying to run any command via Fabric on the server generates a "Fatal
> error: Incompatible ssh server (no acceptable ciphers)" error message.
> The fab file is as simple as it gets:
>
> ---
> from fabric.api import *
> env.user = 'user'
> env.hosts=['server']
>
> def foo():
>    run('pwd')
> ---
>
> I get the same error when trying to use paramiko directly:
>
>>>> import paramiko
>>>> ssh = paramiko.SSHClient()
>>>> ssh.connect('server', username='user', password='lol')
> Traceback (most recent call last):
>  File "<stdin>", line 1, in <module>
>  File "/path/to/paramiko/client.py", line 288, in connect
>   t.start_client()
>  File "/path/to/paramiko/transport.py", line 440, in start_client
>   raise e
> paramiko.SSHException: Incompatible ssh server (no acceptable ciphers)
>
> ---
>
> The log file from paramiko is:
>
> DEBUG:paramiko.transport:starting thread (client mode): 0x748150L
> INFO:paramiko.transport:Connected (version 2.0, client Sun_SSH_1.4)
> DEBUG:paramiko.transport:
> kex algos:['gss-group1-sha1-to-edited',
> 'diffie-hellman-group-exchange-sha1', 'diffie-hellman-group1-sha1']
> server key:['ssh-dss', 'ssh-rsa']
> client encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr',
> 'arcfour128', 'arcfour256', 'arcfour']
> server encrypt:['aes128-ctr', 'aes192-ctr', 'aes256-ctr',
> 'arcfour128', 'arcfour256', 'arcfour']
> client mac:['hmac-md5', 'hmac-sha1', 'hmac-sha1-96', 'hmac-md5-96']
> server mac:['hmac-md5', 'hmac-sha1', 'hmac-sha1-96', 'hmac-md5-96']
> client compress:['none', 'zlib']
> server compress:['none', 'zlib']
> client lang:[--edited for brevity--]
> server lang:[--edited for brevity--]
> kex follows?False
> ERROR:paramiko.transport:Exception: Incompatible ssh server (no
> acceptable ciphers)
> ERROR:paramiko.transport:Traceback (most recent call last):
> ERROR:paramiko.transport:  File "/path/to/paramiko/transport.py", line
> 1513, in run
> ERROR:paramiko.transport:    self._handler_table[ptype](self, m)
> ERROR:paramiko.transport:  File "/path/to/paramiko/transport.py", line
> 1585, in _negotiate_keys
> ERROR:paramiko.transport:    self._parse_kex_init(m)
> ERROR:paramiko.transport:  File "/path/to/paramiko/transport.py", line
> 1725, in _parse_kex_init
> ERROR:paramiko.transport:    raise SSHException('Incompatible ssh
> server (no acceptable ciphers)')
> ERROR:paramiko.transport:SSHException: Incompatible ssh server (no
> acceptable ciphers)
> ERROR:paramiko.transport:
> DEBUG:paramiko.transport:starting thread (client mode): 0x748490L
> INFO:paramiko.transport:Connected (version 2.0, client Sun_SSH_1.4)
>
>
> Any help is greatly appreciated. I sent this to the paramiko list last
> week, but I'm still in moderation purgatory.
>
> -r
>
>
> _______________________________________________
> Fab-user mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/fab-user
>



-- 
Jeff Forcier
Unix sysadmin; Python/Ruby developer
http://bitprophet.org