- Control-M/Agent fails to connect remote host when SSH Server only accept SHA-2 - The ctm_diag_comm utility directed at the remote host produces the following error: ERROR: Couldn't agree a key exchange algorithm SSH Server logs on the remote host would have similar errors as below. Unable to negotiate with <host ip> port <port #>: no matching MAC found. Their offer: hmac-sha1,hmac-md5,none [preauth] - Control-M/Agent logs will shows the below error during the failure to connect to the Remote Host using SSH: 1102 09:44:41:575 AS:<<< SshJob::pingCall: Exiting for host '<Remote Host>' port 22 user ''. rc = 1 1102 09:44:41:575 AS:>>> SshJob::ping connectionStatus is 1 1102 09:44:41:575 AS:>>> SshJob::ping m_sshCtn->authorized 0 1102 09:44:41:575 AS:>>> SshJob::ping m_sshCtn->err Server unexpectedly closed network connection 1102 09:44:41:575 AS:>>> SshJob::ping m_sshCtn->err_code 0 1102 09:44:41:575 AS:ErrorSet: Server unexpectedly closed network connection 1102 09:44:41:575 AS:>>> SshJob::ping exit |
- CAR00118299 has been corrected in version 9.0.20 and is listed in the corrected problems list of the release notes below: https://docs.bmc.com/docs/controlm/9020/corrected-problems-in-9-0-20-900847338.html - In the event that it is not able to upgrade the Control-M/Agent, do discuss with the Security Team to configured the SSHD to accept hmac-sha1 and hmac-md5 authentication code |