Each target works using individual passhport access but randomly fails while using ansible

[exploitation-nehsdigital]

While trying to "ansible ping" every target, I get random erros and did not see anything relevant in sshd debug logs.
The same targets works perfectly while using passhport menu.
I can run my test several times and I never get the same amount of failed targets nor related targets.
Already tried to set sshd maxsession to higher value and did check ulimit.

Thank you,

UNREACHABLE! => {
"changed": false,
"msg": "Failed to connect to the host via ssh: kex_exchange_identification: Connection closed by remote host",
"unreachable": true

SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o 'ProxyCommand=ssh -t -W %h:%p -q -p xxxx passhport@xxxxxxxxxx' -o ControlPath=/home/xx/.ansible/cp/0176122d91 ipaddress '/bin/sh -c '"'"'echo ~root && sleep 0'"'"''

(255, '', 'kex_exchange_identification: Connection closed by remote host\r\n')

[Raphux]

Mmmm i'll try that on my side with your pro-tip you sent on another thread. Stay tuned…
Just to know, how big is your inventory ? Does it occur sometimes at the first host ?

[exploitation-nehsdigital]

around 90 targets, sometimes happen on the 5/6 first targets sometimes not.
We have another passhport instance on which it seems we do not have this kind of issue (I'll check)

Thanks

[elg]

Hi,
Is your passhport behind an apache mod_wsgi?

[exploitation-nehsdigital]

Hi,

No it's not. This is basically the default passhport setup wrote through an ansible playbook

[Raphux]

Haven't had the time to reproduce yet, but @elg is right, it might come from the embedded server in flask which is very limited.

You should definitely try this : https://docs.passhport.org/en/latest/installation-and-configuration/apache-wsgi-for-production.html

[elg]

Hello there,
Thanks to @phlb a new solution is available using environment variables. Everything is ready with #560 and #561 you can find documentation on #561 for using it.
We need to create a specific documentation on "how to use ansible through PaSSHport" since it's now very easy.