I did. The contents of the encrypted file are: admin_group: wheel passwrd: #G00d4now
Rene From: [email protected] <[email protected]> On Behalf Of Joseph Alexander Sent: December 17, 2020 3:32 PM To: [email protected] Subject: Re: [ansible-project] encrypted password hash question and of course you also set the new passwrd variable? Its not null or empty? On Thu, Dec 17, 2020 at 3:25 PM Rene Paquin <[email protected]<mailto:[email protected]>> wrote: Thanks for the suggestion. This just leads to more…. When I use this password: "{{ passwrd | password_hash('sha512', 'A512') }}" I get the following error: TASK [Create Users Task] ********************************************************************************************** fatal: [qreneansible.wlu.ca<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fqreneansible.wlu.ca&c=E,1,RiBxmt-nYbiAmqGg9HeqDjvQef_KY6hwlG-egxRxb4VsINcNlMI3tpy3slt76i3iSgqW0O1VqMjm6ua1lP-du_mgSoUZT3xqNY60HcESEdy7Sje9Pgk_1BRR&typo=1>]: FAILED! => {"msg": "Unexpected templating type error occurred on ({{ passwd | password_hash('sha512', 'A512') }}): crypt() argument 1 must be str, not None"} PLAY RECAP ************************************************************************************************************ qreneansible.wlu.ca<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fqreneansible.wlu.ca&c=E,1,zXTM2QEMX7I8RuzylWDXLfOWsqkT8Nnheth_vGR6L2vBVCCo6mDtChSx9Q3I-Q1jDmTqUDDbNJaHKnKYcw7AKonN0fwjw0sfOu8bLr2fIflL2A,,&typo=1> : ok=0 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0 It seems that it cannot find the variable anywhere. In the playbook file I did add the following but it still cant find it. The file is encrypted as well. vars_files: - group_vars/ol8 Thanks again, Rene From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> On Behalf Of Joseph Alexander Sent: December 17, 2020 3:05 PM To: [email protected]<mailto:[email protected]> Subject: Re: [ansible-project] encrypted password hash question I always find that behavior gets tricky when using key words as variables. Try changing password to pwd or passwd. On Thu, Dec 17, 2020 at 2:51 PM Rene Paquin <[email protected]<mailto:[email protected]>> wrote: Further to this.. I found that when using this statement in the playbook it is not grabbing the variable in the group_vars/ol8 file but actually passing password as password despite the removal of quotes. Just wondering if I am missing to declare something? password: "{{ password | password_hash('sha512', 'A512') }}" Rene -----Original Message----- From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> On Behalf Of Stefan Hornburg (Racke) Sent: December 17, 2020 3:14 AM To: [email protected]<mailto:[email protected]> Subject: Re: [ansible-project] encrypted password hash question On 12/16/20 8:56 PM, Rene Paquin wrote: > Hi. New ansible user here so just starting out. My first experiment > is to create a user with sudo privileges on an Oracle Linux 8 server > in my test environment. Here are the contents of the files in the > /home/”user”/ansible/playbooks folder. I think I am missing something as > when I run the playbook it runs successfully. I confirm that the account is > created however when I attempt to ssh or login the attempt gets denied access. > > > > Any help is appreciated. > > > > Thank you, > > > > *user_pass.ym*l - encrypted using “ansible-vault create > user_pass.yml” in group_vars folder > > admin_group: wheel > > password: #G00d4now > > > > *ansible.cfg* > > [defaults] > > inventory = ./inventory > > remote_user = (local user with authorized keys) > > [privilege_escalation] > > become = true > > become_method = sudo > > become_user = root > > > > *inventory* > > [ol8] > > qansibletest > > > > *create_users.yml* > > - name: Create New Users > > hosts: all > > gather_facts: false > > tasks: > > - name: Create User Task > > user: > > name: devops > > state: present > > password: "{{ 'password' | password_hash('sha512','A512') }}" > > shell: /bin/bash > > groups: "{{ admin_group }}" > > append: true > > ... > > You are literally passing the string "passsword" instead of the value of the password variable. Remove the quotes from 'password', Regards Racke > > > > > > ******************************** > Rene Paquin - Systems Administrator > Wilfrid Laurier University > Waterloo, Ontario > (519)884-0710 x3795 > [email protected]<mailto:[email protected]> > <mailto:[email protected]<mailto:[email protected]>> > > > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to > [email protected]<mailto:ansible-project%[email protected]> > > <mailto:[email protected]<mailto:ansible-project%[email protected]>>. > To view this discussion on the web visit > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%25> > 2fd%2fmsgid%2fansible-project%2fYTXPR0101MB1295AA2DBF8B42EDB8DCD249D8C > 50%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM<http://40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM>&c=E,1,UGzFjVFOYydfZh4-G > SOX_xxknGYspdRhMbPs735mhe_mgi8iyHSJvL5_Er9qWfNmf9-wg5rUCYBf8shEOMvS3l7 > CCHkN3ry0ZzG-bXGuYu5c&typo=1 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYTXPR0101MB1295AA2DBF8B42EDB8DCD249D8C50%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,REf0hyikO5Lj36aRFlEzrZIP2Or2zM5K7B0ejKPv_ZoI2K298Iio_lkAXSxHMAPAxFi4StvPIa6X5CiPpJGIesx38agbN9Ax53zEzHuJP-16OCKavcyF&typo=1>. -- Ecommerce and Linux consulting + Perl and web application programming. Debian and Sympa administration. Provisioning with Ansible. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:ansible-project%[email protected]>. To view this discussion on the web visit https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fc25e9a65-bab9-74f1-1914-a595ed877e20%40linuxia.de.&c=E,1,li22miLGrvEE1wI4s-eWkq0aiTeqCkNysKddCCsXACQiXEeUqdqYPwZrXWg1WzVRikAKeVZXwEP49G2F4b8c3V2TZubwlcLTvnkPmsBqNcsIn3sf-RE,&typo=1 -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:ansible-project%[email protected]>. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB129555BCD8AC0A903654ECC4D8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYTXPR0101MB129555BCD8AC0A903654ECC4D8C40%2540YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM&c=E,1,TgyEgJByaVY6B4vYdxpWTJZX6D6AjHPjY5bD051sA92bIY-RhtuohW0Fhm32e6WuTO8MpyeBw6c6-tY_m7vQ1PLnuTEDxB5ZC2GO7ViEB_QfTrJxESPj4LQ,&typo=1>. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CANhJoDyNfDCzR-WSXPoHwqkhLvFZA0HGkdybQ8qMnSXAPuEmeQ%40mail.gmail.com<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fCANhJoDyNfDCzR-WSXPoHwqkhLvFZA0HGkdybQ8qMnSXAPuEmeQ%2540mail.gmail.com%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,573mC0SH9t0xMn2KK1oUO-Ramo12rOwWiJs-HuTa65MMaMpK11jBBAGIX890v9Ki6nhuD-0DnsTP7-7WBn6rSEnziCpNAb9xuBPz-B9JqQ,,&typo=1>. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB129567F2C94DBBEE7F9C7B32D8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYTXPR0101MB129567F2C94DBBEE7F9C7B32D8C40%2540YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,KwVGpL0ZUJjY0n7IKPvq8f60JLsyeYxE1Rvft1zjgkEWp7toqK1NkHkUGLOcVI5R4gm_pRyt-vz19aLhvnwTHpn3xhqnSU7HklytzEg03oUKp7FwTcA,&typo=1>. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CANhJoDzgUawHUUtHiFg0CqmAi2H3GcHFJ16OQEAwmAaN%2BJjKyw%40mail.gmail.com<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fCANhJoDzgUawHUUtHiFg0CqmAi2H3GcHFJ16OQEAwmAaN%252BJjKyw%2540mail.gmail.com%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,Gg9FLn1pcEt5OODRur-YhCWtb7tJtllkgJ1RCrfUq9wv4aXUZ0YqqoQDoUbatFTgrPfDdN8IKHmWPrkMm4jQekgeWE1N_5GTH6VwzN9Yd6oXxGo1uIbcvhCZHHO5&typo=1>. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB1295613C7183FCE18635A07FD8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM.
