Doesn't seem to work with Ubuntu 22

[mustafa0x]

The following gives me AuthenticationException with paramiko-ng, while it works fine with paramiko-2.11.0.

import paramiko
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect('<ip>', username='<user>')

The host is runs Ubuntu 22. Pointing to an Ubuntu 20 server resolves.

[ploxiln]

I think this is due to using an RSA key - the original protocol for signing with the RSA key is to use sha1, but that's frowned upon now, and disabled by default in openssh on ubuntu-22.04. There's a new way to sign using sha-256 or sha-512, I haven't added this feature to paramiko-ng yet, but it was added to paramiko-2.9.0.

[mustafa0x]

Thank you! There's no rough estimate when this might be fixed, right? (I thought this workaround might work, but seems the problem here varies slightly -- https://askubuntu.com/questions/1404049/ssh-without-password-does-not-work-after-upgrading-from-18-04-to-22-04)

[ploxiln]

There's no rough estimate when this might be fixed, right?

Considering that I haven't really done any work on this project in the last 6 months, that's a good assumption :) but who knows, maybe I'll get back into it now ...

[mustafa0x]

So, funny thing, I ran pip uninstall paramiko-ng && pip install paramiko, and my fab script is working.

I assume fab-classic isn't fully compatible with paramiko and will break in some odd ways, but it's smooth sailing so far.

[ploxiln]

fab-classic should be pretty much fully compatible with original/upstream paramiko, and there's even a trick to making it explicitly depend on original/upstream paramiko instead of paramiko-ng if you need to install it again:

PARAMIKO_REPLACE=1 pip install --no-binary fab-classic 

(mentioned in https://github.com/ploxiln/fab-classic#install)

(But it is usually necessary to uninstall paramiko or paramiko-ng before switching to the other, otherwise things are silently mixed-up, so it's good you did that :)