topic Re: Invoke-NcSsh failing with ONTAP 9.3 in Microsoft Virtualization Discussions

Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Tue, 16 Jan 2018 12:58:14 GMT

I have just upgrade a lab controller to 9.3 so I could test some deployment scripts. Part of my scripts issue "Invoke-NcSsh" commands because a commandlet is not working as intended or does not exsist. I had originally thought it was an issue with the 4.4 verion of the powershell toolkit. I upgraded to 4.5 and I am still getting the same error. See error below:

"Invoke-NcSsh : An established connection was aborted by the software in your host machine."

Everything works from 9.0 - 9.2P1, but not in 9.3.

Any help would be great.

Re: Invoke-NcSsh failing with ONTAP 9.3

JGPSHNTAP — Tue, 16 Jan 2018 13:16:54 GMT

Good catch, I can confirm i'm seeing the same thing in 9.3RC1 as well. I assume when I upgrade our lab to GA, it will be the same thing.

My error is this.

invoke-ncssh : An established connection was aborted by the software in your host machine.

We are probably just missing a new security setting in 9.3 that needs to be tweaked..

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Tue, 16 Jan 2018 13:31:24 GMT

I am hoping that is the case. I am working now to re-write the commands with current cmdlets and a lot of piping.

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Thu, 18 Jan 2018 14:45:50 GMT

Curious if anyone else has experienced this and maybe found a work around or a security change that is needed.

Re: Invoke-NcSsh failing with ONTAP 9.3

asulliva — Thu, 18 Jan 2018 18:00:34 GMT

Hello everyone,

I verified this behavior yesterday and created a bug for it (1136301).

Please let me know if I can help!

Andrew

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Thu, 18 Jan 2018 18:18:21 GMT

Please post when an update or workaround has been determined.

Re: Invoke-NcSsh failing with ONTAP 9.3

JohnChampion — Thu, 25 Jan 2018 15:51:55 GMT

This would seem to be the same issue currently with 8.2.5 7-mode .... see the following post ...

http://community.netapp.com/t5/Microsoft-Cloud-and-Virtualization-Discussions/Invoke-NaSsh-not-working-anymore-with-DOT-8-2-5-7-mode/td-p/133511

There is a workaround code example in the 8.2.5 7-mode thread posted by skellner using Invoke-NaSystemAPI (page 2). I changed the "Na" to "Nc" and it works without any other modifications.

While this still needs to be fixed obviously - the other post gives more details on the issue and hopefully a stop-gap workaround for most.

Re: Invoke-NcSsh failing with ONTAP 9.3

hland — Thu, 22 Feb 2018 17:12:08 GMT

If you are affected by this, I suggest to open a support case and ask the support engineer to attach the case to the internal bug 1136301 (mentioned by Andrew). This way the customer impact is more visible to engineering and the issue can be correctly prioritized.

Regards

Hendrik

Re: Invoke-NcSsh failing with ONTAP 9.3

asulliva — Fri, 02 Mar 2018 14:42:36 GMT

Hello everyone,

I'm happy to let you all know that PowerShell Toolkit 4.5P1 has been released with fixes for the Invoke-NaSsh and Invoke-NcSsh cmdlets. You can get the new version here.

Please let me know if you have any questions!

Andrew

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Fri, 02 Mar 2018 18:57:06 GMT

I will be testing this shortly.

Re: Invoke-NcSsh failing with ONTAP 9.3

JGPSHNTAP — Fri, 02 Mar 2018 19:04:57 GMT

Please that will save me from testing...

Can someone comment on why putty is required, and what the toolkit was changed to use putty?

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Fri, 02 Mar 2018 19:22:18 GMT

I just tested and Putty .70 was required. The test was successful though.

Re: Invoke-NcSsh failing with ONTAP 9.3

JGPSHNTAP — Fri, 02 Mar 2018 19:28:56 GMT

Does putty have to be installed in native path.

I currently have it in my path statement in c:\windows\system32

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Fri, 02 Mar 2018 19:34:20 GMT

I installed it into its native path.

Re: Invoke-NcSsh failing with ONTAP 9.3

NHANAS_RS — Fri, 16 Mar 2018 17:05:49 GMT

tested & fixed with NetApp powershell toolkit 4.5P1, .net 4.5+ & Putty v0.70 on Server 2012 (In my case i also needed to "Run As Administrator" powershell)

But did anyone get this fixed and its working on Server 2008? I still receive this error: invoke-ncssh : An established connection was aborted by the software in your host machine. on Server 2008 with the same set of fixes\pre-req's.

Fixed: https://community.netapp.com/t5/Microsoft-Cloud-and-Virtualization-Discussions/NetApp-PowerShell-Toolkit-4-5P1-released/m-p/138858/highlight/false#M5663

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Wed, 07 Mar 2018 20:26:56 GMT

I’ve only ever run from windows 7 and windows 10...always had same results.

Re: Invoke-NcSsh failing with ONTAP 9.3

drwoodberry — Wed, 25 Apr 2018 14:40:09 GMT

I have been noticing some interesting things when running the powershell toolkit with the latest putty in windows 10. I have set the execution policy on maching to unrestricted. Previously I would just right click my .PS1 file and run with powershell and everything would work fine. Now when I run things this way I get the following error.

PS>TerminatingError(Invoke-NcSsh): "Requested registry access is not allowed."
Invoke-NcSsh : Requested registry access is not allowed.

If I open powershell as an admin and run from the command line that error goes away. Any ideas?

Re: Invoke-NcSsh failing with ONTAP 9.3

asulliva — Wed, 25 Apr 2018 16:05:54 GMT

This is a result of the fix for the broken Invoke-NcSsh cmdlet with the newest versions of ONTAP...it uses PuTTY to make the SSH call now instead of a library shipped with PSTK. The error you're seeing is because behind the scenes it's accessing the registry to, I believe, determine the location of the PuTTY (or, rather, plink) executable. Normally, that registry key requires administrator level privileges to access, hence why you see the error go away when using an elevated PowerShell prompt.

You can "fix" it by adjusting the permissions on the the key, as described here.

Andrew

Re: Invoke-NcSsh failing with ONTAP 9.3

Girton — Tue, 12 Jun 2018 19:23:49 GMT

One issue I encountered on W2K12R2, even after installing Putty 64-bit V0.70, was that PowerShell kept saying:

Please install putty (version putty-64bit-0.70) on your machine to use this cmdlet.

I used SysInternal's 'Procmon.exe' utility to monitor PowerShell's access to the registry, and I saw that it was looking for this registry key:
HKCU\SOFTWARE\SimonTatham\PuTTY64

It turned out that my W2K12R2 server didn't have a registry key called 'PuTTY64', it had 'PuTTY'. I added '64' to the registry key, so it looked like 'PuTTY64', and then the InovkeNcSsh cmdlet worked like it was supposed to.

I suspect that I had a 32-bit version of PuTTY installed prior to installing the 64-bit version, and the registry key didn't get updated to 'PuTTY64', since it already existed.

I made sure that the permission were as described elsewhere in a the thread that asulliva linked to:

All application packages: Full Control
Users (of the local machine your on): Full Control

I hope that this information helps others who are trying to get the InovkeNcSsh cmdlet to work.

Re: Invoke-NcSsh failing with ONTAP 9.3

MarcelM — Wed, 20 Jun 2018 10:00:07 GMT

After following all the required instructions and troubleshooting steps we are still receiving the same error:

Invoke-NcSsh : An established connection was aborted by the software in your host machine.

- Windows Server 2012 R2 (Version 6.3 Build 9600)

- NA PSTK 4.6.0

get-natoolkitversion

Major Minor Build Revision
----- ----- ----- --------
4 2 0 0

- Putty release 0.70 (32/64) installed in native Path: C:\Program Files (x86)\PuTTY // C:\Program Files\PuTTY

- ONTAP 9.3P2

- granted permissions "Full Controll" to "All application packages" in registry for "HKEY_LOCAL_MACHINE"\SOFTWARE\SimonTatham"

- copied putty and plink to "C:\Program Files (x86)\NetApp\NetApp PowerShell Toolkit\Modules\DataONTAP"

- rebooted server

Commands are working fine for ONTAP 9.2 systems from the same enviroment.

What are we missing? Any hints?