Yes I thought the same. But I am using pywinrm=0.4.0 but still it fails to use this flag. Request please validate. Thanks, Bhushan
> On 05-Feb-2020, at 15:02, John Roh <[email protected]> wrote: > > pywirnm==0.4.0 included the fix for > ansible_winrm_server_cert_validation=ignore. I'm currently using > pywinrm=0.4.0 on my dockerfile. > > On Wed, Feb 5, 2020 at 1:26 AM Bhushan Gholave <[email protected] > <mailto:[email protected]>> wrote: > I see there is possibility of issue with pywinrm > https://github.com/diyan/pywinrm/issues/201 > <https://github.com/diyan/pywinrm/issues/201> > looks similar > > On Wednesday, February 5, 2020 at 2:38:30 PM UTC+5:30, Bhushan Gholave wrote: > Hi All, > > Issue closed : https://github.com/ansible/ansible/issues/67114 > <https://github.com/ansible/ansible/issues/67114> > > 1. host file > [windows] > 192.152.1.21 ansible_user=administrator ansible_password=Password123 > ansible_port=5986 ansible_winrm_transport=basic > ansible_winrm_server_cert_validation=ignore ansible_connection=winrm > 2. run ansible -i host -m win_ping all - with ansible version 2.8.5 > response:- > 192.152.1.21 | SUCCESS => { > "changed": false, > } > "ping": "pong" > 3. run ansible -i host -m win_ping all - with ansible version 2.9.4 > response:- > 192.152.1.21 | UNREACHABLE! => { > "changed": false, > "msg": "basic: HTTPSConnectionPool(host='192.152.1.21', port=5986): Max > retries exceeded with url: /wsman (Caused by SSLError(SSLError(1, '[SSL: > UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:897)'),))", > "unreachable": true > } > 4. I followed > https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html > <https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html> > documentation to setup windows host. I run Upgrade-PowerShell.ps1, > Install-WMF3Hotfix.ps1, ConfigureRemotingForAnsible.ps1 and winrm settings > mentioned. > 5. Work around if i do .\ConfigureRemotingForAnsible.ps1 -ForceNewSSLCert > then it start working on both version. > 6. I think even if we give ansible_winrm_server_cert_validation=ignore flag > still it search for self sign certificate on target machine. > My guess might be wrong but we need to find out exact reason behind this. > Thanks, > Bhushan > > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/4a6a63b5-f1bb-4bdb-afb5-e74c3d0a004e%40googlegroups.com > > <https://groups.google.com/d/msgid/ansible-project/4a6a63b5-f1bb-4bdb-afb5-e74c3d0a004e%40googlegroups.com?utm_medium=email&utm_source=footer>. > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CAPxBRp4Ow_6g0%3D%2B8LwXARnas5q-LYk259oAT0qmcJDx0JNgAwg%40mail.gmail.com > > <https://groups.google.com/d/msgid/ansible-project/CAPxBRp4Ow_6g0%3D%2B8LwXARnas5q-LYk259oAT0qmcJDx0JNgAwg%40mail.gmail.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/3589FE23-E4D5-49DE-85CF-F9AC4DA12570%40cloudhedge.io.
