Hi all,

I'm trying to pass a couple of command line keys thru ssh_extra_args and it 
seems to me that there's a very annoying limitation: only one key can be 
passed because of apostrophs around the value of this parameter. 
This is the ssh command generated by ansible:
<172.17.24.7> SSH: EXEC ssh -C -vvv -o ControlMaster=auto -o 
ControlPersist=60s -o KbdInteractiveAuthentication=no -o 
PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey 
-o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 '-R 
3128:proxy.srv1.lan:3128 -i /home/bamboo/.ssh/mykey' -o 
ControlPath=/home/bamboo/.ansible/cp/ansible-ssh-%h-%p-%r 172.17.24.7 
'LANG=C LC_ALL=C LC_MESSAGES=C /usr/bin/python'


16-Mar-2016 17:38:13 fatal: [srv-mon]: UNREACHABLE! => {"changed": false, 
"msg": "ERROR! SSH Error: data could not be sent to the remote host. Make 
sure this host can be reached over ssh", "unreachable": true}

Ansible hides for some reason the errors from ssh (a bug to me), so I ran 
this commans from shell:
$ ssh -C -vvv -o ControlMaster=auto -o ControlPersist=60s -o 
KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,
gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o 
ConnectTimeout=10 '-R 3128:proxy.srv1.lan:3128 -i /home/bamboo/.ssh/mykey' -o 
ControlPath=/home/bamboo/.ansible/cp/ansible-ssh-%h-%p-%r 172.17.24.7


Bad remote forwarding specification ' 3128:proxy.srv1.lan:3128 -i 
/home/bamboo/.ssh/mykey'

Now it's clear, two keys in single apostrophs are treated as one.
Can we eliminate this escaping at all? 

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/df8faf31-8a53-4c2c-b6c1-bee80944b8ef%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to