Can't get the connection to work with a password-encrypted key in Junos

[gabrieldslacerda]

Hello, I'm trying to open a connection to a Junos device via SSH/private key and I can't make it work. The file has a password, and I'm using the password in the "password" field, but I keep getting an auth fail when I try to connect:

optional_args = {'port': '22', 'key_file': 'file'}
        napalm_connect = driver(
            hostname=management_ip,
            password=ssh_pass,
            optional_args=optional_args
            )
        print(f'Connecting to {device_name}')
        napalm_connect.open()

I get:

Connecting to crt01-nkf
Traceback (most recent call last):
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\jnpr\junos\device.py", line 1374, in open
    self._conn = netconf_ssh.connect(
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\ncclient\manager.py", line 176, in connect
    return connect_ssh(*args, **kwds)
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\ncclient\manager.py", line 143, in connect_ssh
    session.connect(*args, **kwds)
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\ncclient\transport\ssh.py", line 364, in connect
    self._auth(username, password, key_filenames, allow_agent, look_for_keys)
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\ncclient\transport\ssh.py", line 480, in _auth
    raise AuthenticationError(repr(saved_exception))
ncclient.transport.errors.AuthenticationError: AuthenticationException('Authentication failed.')

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Users\gabriel.lacerda\cmdb\ssh_update\update_network_devices.py", line 240, in <module>
    updated_plat = ChangesNetbox().update_platform(name_device, id_device, platform)
  File "C:\Users\gabriel.lacerda\cmdb\ssh_update\update_network_devices.py", line 38, in update_platform
    connect_device = self.update_interface(device_id, management_ip, device_name)
  File "C:\Users\gabriel.lacerda\cmdb\ssh_update\update_network_devices.py", line 60, in update_interface
    napalm_connect.open()
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\napalm\junos\junos.py", line 140, in open
    self.device.open(auto_probe=self.auto_probe)
  File "C:\Users\gabriel.lacerda\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\jnpr\junos\device.py", line 1395, in open
    raise EzErrors.ConnectAuthError(self)
jnpr.junos.exception.ConnectAuthError: ConnectAuthError(172.17.0.51)

Any suggestions?

[ktbyers]

@gabrieldslacerda I would try this directly in Juniper PyEZ and see if you can get it working there (as NAPALM is just using that internally).

If you can get this working with PyEZ we can then figure out why it is not mapping to PyEZ.

[gabrieldslacerda]

Hello @ktbyers. After some digging, i found that the issue is in Paramiko's module used by PyEZ: ncclient/ncclient#526

They still didn't agree with a fix, so the issue is still there.

[ktbyers]

Okay, I might see if I can submit a PR for that to ncclient.

I fixed that issue in Netmiko previously here (Netmiko uses Paramiko so it had the same issue).

https://github.com/ktbyers/netmiko/blob/develop/netmiko/base_connection.py#L448-L455