Problem:

This error indicates that the remote host is reachable over the network and responding to SSH connections, as shown by the host key being successfully added to the known hosts list. However, the connection fails at the authentication stage, meaning none of the available authentication methods (public key, GSSAPI, or password) were accepted for the root user. As a result, the system is unable to log in to the remote host, and the operation is marked as unreachable, not because of a network issue, but because SSH access could not be established with the provided credentials or permissions.

  msg: |-
    Data could not be sent to remote host "<IP>". Make sure this host can be reached over ssh: Warning: Permanently added '<IP>' (ECDSA) to the list of known hosts.
    root@<IP>: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
  unreachable: true

Possible Cause(s):

• Root Cause 1: IP Address is not declared properly on the /etc/hosts on the Collector:
• Root Cause 2: The /etc/ssh/sshd_config is not configured correctly:

• Root Cause 3: Public Key is not present on the Orchestrator/Collector(s) in the Cluster:

   

Possible solution(s):

• Solution Root Cause 1:

  Please ensure that the collector’s hostname and IP address are correctly configured in the /etc/hosts file. Any mismatch here can cause connectivity and authentication issues.

   

• Solution Root Cause 2:

  Verify that root login over SSH is permitted if this is required for your setup. You can enable this by setting PermitRootLogin yes in the SSH configuration file, then restarting the SSH service by running the command below:

  systemctl restart sshd

   

• Solution Root Cause 3:

  Confirm the SSH public keys are correctly configured in both directions for the relevant connections (e.g., Orchestrator to Collector, or Collector to Collector within a cluster).
  If the system prompts for a password when accessing the collector, this indicates that passwordless authentication has not been set up correctly.

If you need further help:

• Please contact our support team via the chat service box on any of our websites or raise a support request.
  
• Make sure you provide us with:
  • Background of the issue or request.
  • Use cases, requirements, business impact, etc.
  • Encountered error messages.
  • Log files or diagnostic files.
  • Screenshots.
  • And other important information relevant to your inquiry.