I'd prefer to use a local Windows account without installing Moba SSH. I 
found very little documentation on how to set up Ansible with Windows 
servers. I have a Linux server running Ansible.  I am trying to configure 
Ansible to push files to a Windows server. I have a basic playbook. The 
/etc/ansible/hosts file has an entry for an IP address for the Windows 
server. The /etc/ansible/hosts file is configured to use a local user 
account on the Windows server. I am not using Kerberos. I am not trying to 
use Windows domain authentication. Do I need to use Kerberos or Windows 
domain authentication to have Ansible manage Windows servers? 


When the /etc/ansible/hosts file has this entry (in the [windows:var] 
section):  ansible_connection=winrm 

I can run a playbook and get the following output:

ESTABLISH WINRM CONNECTION... fata [x.x.x.x] => 401 Unauthorized

The above playbook run corresponds with no event logging on the Windows 
server. The below output corresponds with Windows Server System Log events. 

When the /etc/ansible/hosts file has this entry (in the [windows:var] 
section, and instead of the ansible_connection entry above):  
ansible_ssh_connection=winrm 


and I run a playbook, I get this output:

ESTABLISH CONNECTION FOR USER... PasswordAuthentication=no ... fatal: 
[x.x.x.x] => SSH Error: Connection timed out during banner exchange ... 
unreachable = 1 ...

I expect the Playbook to work. I don't expect the PasswordAuthentication to 
be set to no. I'm not sure how SSH works with a Windows server. I want to 
use Ansible to manage a Windows server with local authentication.

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/accc4d02-16f0-42a6-bd21-f5e2f729f476%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to