unable to access "old-webextra" container on osgeo7

[Jeff McKenna]

• unable to access the old-webextra container on osgeo7
• no problems accessing other containers on osgeo7 such as the mapserver container
• error when trying to ProxyJump through osgeo7, onto old-webextra:

    Unable to negotiate with UNKNOWN port 65535: no matching host key type found. Their offer: ssh-rsa,ssh-dss
  

• my LDAP/OSGeo username is jmckenna

[robe]

I am able to log into it okay with the hop. That error suggests maybe you have a new key that is not registered on old-webextra.

The old-webextra doesn't read keys from LDAP, although you should be then prompted for a password. I don't have an ssh key installed on old-webextra, but was able to get in with my password.

What kind of ssh key are you using?

[Jeff McKenna]

I am trying to use the same hop that I do for all other containers on osgeo7, but for some reason I cannot connect anymore to old-webextra that way. Hmmm. Not sure what is happening. Will keep trying here...

[Jeff McKenna]

Solved, I removed the old entry in my local known_hosts for old-webextra, and now I am prompted for password, and in. Thanks for your ideas @robe you helped me battle this. -jeff

[Jeff McKenna]

For the record (in case someone else hits this someday), the important change on my side (I use OpenSSH, on Windows) was actually the following:

• add HostKeyAlgorithms=+ssh-dss for this connection in my SSH config file for this old-webextra connection
  • see comments at ​https://askubuntu.com/questions/836048/ssh-returns-no-matching-host-key-type-found-their-offer-ssh-dss
• then remove the old entry for old-webextra in my known_hosts, and retry to connect, you should then see a password query