try removing the # from the password and see if that makes a difference On Thu, Dec 17, 2020 at 3:37 PM Rene Paquin <[email protected]> wrote:
> I did. The contents of the encrypted file are: > > > > admin_group: wheel > > passwrd: #G00d4now > > > > Rene > > > > > > *From:* [email protected] <[email protected]> > *On Behalf Of *Joseph Alexander > *Sent:* December 17, 2020 3:32 PM > *To:* [email protected] > *Subject:* Re: [ansible-project] encrypted password hash question > > > > and of course you also set the new passwrd variable? Its not null or empty? > > > > On Thu, Dec 17, 2020 at 3:25 PM Rene Paquin <[email protected]> wrote: > > Thanks for the suggestion. This just leads to more…. > > > > When I use this > > password: "{{ passwrd | password_hash('sha512', 'A512') }}" I get the > following error: > > > > TASK [Create Users Task] > ********************************************************************************************** > > fatal: [qreneansible.wlu.ca > <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fqreneansible.wlu.ca&c=E,1,RiBxmt-nYbiAmqGg9HeqDjvQef_KY6hwlG-egxRxb4VsINcNlMI3tpy3slt76i3iSgqW0O1VqMjm6ua1lP-du_mgSoUZT3xqNY60HcESEdy7Sje9Pgk_1BRR&typo=1>]: > FAILED! => {"msg": "Unexpected templating type error occurred on ({{ passwd > | password_hash('sha512', 'A512') }}): crypt() argument 1 must be str, not > None"} > > > > PLAY RECAP > ************************************************************************************************************ > > qreneansible.wlu.ca > <https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fqreneansible.wlu.ca&c=E,1,zXTM2QEMX7I8RuzylWDXLfOWsqkT8Nnheth_vGR6L2vBVCCo6mDtChSx9Q3I-Q1jDmTqUDDbNJaHKnKYcw7AKonN0fwjw0sfOu8bLr2fIflL2A,,&typo=1> > : ok=0 changed=0 unreachable=0 failed=1 skipped=0 > rescued=0 ignored=0 > > > > > > It seems that it cannot find the variable anywhere. In the playbook file > I did add the following but it still cant find it. The file is encrypted > as well. > > > > vars_files: > > - group_vars/ol8 > > > > Thanks again, > > > > Rene > > > > *From:* [email protected] <[email protected]> > *On Behalf Of *Joseph Alexander > *Sent:* December 17, 2020 3:05 PM > *To:* [email protected] > *Subject:* Re: [ansible-project] encrypted password hash question > > > > I always find that behavior gets tricky when using key words as variables. > Try changing password to pwd or passwd. > > > > On Thu, Dec 17, 2020 at 2:51 PM Rene Paquin <[email protected]> wrote: > > Further to this.. > > I found that when using this statement in the playbook it is not grabbing > the variable in the group_vars/ol8 file but actually passing password as > password despite the removal of quotes. Just wondering if I am missing to > declare something? > > password: "{{ password | password_hash('sha512', 'A512') }}" > > Rene > > -----Original Message----- > From: [email protected] <[email protected]> > On Behalf Of Stefan Hornburg (Racke) > Sent: December 17, 2020 3:14 AM > To: [email protected] > Subject: Re: [ansible-project] encrypted password hash question > > On 12/16/20 8:56 PM, Rene Paquin wrote: > > Hi. New ansible user here so just starting out. My first experiment > > is to create a user with sudo privileges on an Oracle Linux 8 server > > in my test environment. Here are the contents of the files in the > > /home/”user”/ansible/playbooks folder. I think I am missing something > as when I run the playbook it runs successfully. I confirm that the > account is created however when I attempt to ssh or login the attempt gets > denied access. > > > > > > > > Any help is appreciated. > > > > > > > > Thank you, > > > > > > > > *user_pass.ym*l - encrypted using “ansible-vault create > > user_pass.yml” in group_vars folder > > > > admin_group: wheel > > > > password: #G00d4now > > > > > > > > *ansible.cfg* > > > > [defaults] > > > > inventory = ./inventory > > > > remote_user = (local user with authorized keys) > > > > [privilege_escalation] > > > > become = true > > > > become_method = sudo > > > > become_user = root > > > > > > > > *inventory* > > > > [ol8] > > > > qansibletest > > > > > > > > *create_users.yml* > > > > - name: Create New Users > > > > hosts: all > > > > gather_facts: false > > > > tasks: > > > > - name: Create User Task > > > > user: > > > > name: devops > > > > state: present > > > > password: "{{ 'password' | password_hash('sha512','A512') }}" > > > > shell: /bin/bash > > > > groups: "{{ admin_group }}" > > > > append: true > > > > ... > > > > > > You are literally passing the string "passsword" instead of the value of > the password variable. Remove the quotes from 'password', > > Regards > Racke > > > > > > > > > > > > > ******************************** > > Rene Paquin - Systems Administrator > > Wilfrid Laurier University > > Waterloo, Ontario > > (519)884-0710 x3795 > > [email protected] <mailto:[email protected]> > > > > > > > > -- > > You received this message because you are subscribed to the Google > Groups "Ansible Project" group. > > To unsubscribe from this group and stop receiving emails from it, send > > an email to > > [email protected] <mailto: > [email protected]>. > > To view this discussion on the web visit > > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com% > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%25> > > 2fd%2fmsgid%2fansible-project%2fYTXPR0101MB1295AA2DBF8B42EDB8DCD249D8C > > 50%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM&c=E,1,UGzFjVFOYydfZh4-G > > SOX_xxknGYspdRhMbPs735mhe_mgi8iyHSJvL5_Er9qWfNmf9-wg5rUCYBf8shEOMvS3l7 > > CCHkN3ry0ZzG-bXGuYu5c&typo=1 > > < > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYTXPR0101MB1295AA2DBF8B42EDB8DCD249D8C50%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,REf0hyikO5Lj36aRFlEzrZIP2Or2zM5K7B0ejKPv_ZoI2K298Iio_lkAXSxHMAPAxFi4StvPIa6X5CiPpJGIesx38agbN9Ax53zEzHuJP-16OCKavcyF&typo=1 > >. > > > -- > Ecommerce and Linux consulting + Perl and web application programming. > Debian and Sympa administration. Provisioning with Ansible. > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fc25e9a65-bab9-74f1-1914-a595ed877e20%40linuxia.de.&c=E,1,li22miLGrvEE1wI4s-eWkq0aiTeqCkNysKddCCsXACQiXEeUqdqYPwZrXWg1WzVRikAKeVZXwEP49G2F4b8c3V2TZubwlcLTvnkPmsBqNcsIn3sf-RE,&typo=1 > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB129555BCD8AC0A903654ECC4D8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYTXPR0101MB129555BCD8AC0A903654ECC4D8C40%2540YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM&c=E,1,TgyEgJByaVY6B4vYdxpWTJZX6D6AjHPjY5bD051sA92bIY-RhtuohW0Fhm32e6WuTO8MpyeBw6c6-tY_m7vQ1PLnuTEDxB5ZC2GO7ViEB_QfTrJxESPj4LQ,&typo=1> > . > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CANhJoDyNfDCzR-WSXPoHwqkhLvFZA0HGkdybQ8qMnSXAPuEmeQ%40mail.gmail.com > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fCANhJoDyNfDCzR-WSXPoHwqkhLvFZA0HGkdybQ8qMnSXAPuEmeQ%2540mail.gmail.com%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,573mC0SH9t0xMn2KK1oUO-Ramo12rOwWiJs-HuTa65MMaMpK11jBBAGIX890v9Ki6nhuD-0DnsTP7-7WBn6rSEnziCpNAb9xuBPz-B9JqQ,,&typo=1> > . > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB129567F2C94DBBEE7F9C7B32D8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fYTXPR0101MB129567F2C94DBBEE7F9C7B32D8C40%2540YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,KwVGpL0ZUJjY0n7IKPvq8f60JLsyeYxE1Rvft1zjgkEWp7toqK1NkHkUGLOcVI5R4gm_pRyt-vz19aLhvnwTHpn3xhqnSU7HklytzEg03oUKp7FwTcA,&typo=1> > . > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CANhJoDzgUawHUUtHiFg0CqmAi2H3GcHFJ16OQEAwmAaN%2BJjKyw%40mail.gmail.com > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fd%2fmsgid%2fansible-project%2fCANhJoDzgUawHUUtHiFg0CqmAi2H3GcHFJ16OQEAwmAaN%252BJjKyw%2540mail.gmail.com%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,Gg9FLn1pcEt5OODRur-YhCWtb7tJtllkgJ1RCrfUq9wv4aXUZ0YqqoQDoUbatFTgrPfDdN8IKHmWPrkMm4jQekgeWE1N_5GTH6VwzN9Yd6oXxGo1uIbcvhCZHHO5&typo=1> > . > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB1295613C7183FCE18635A07FD8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM > <https://groups.google.com/d/msgid/ansible-project/YTXPR0101MB1295613C7183FCE18635A07FD8C40%40YTXPR0101MB1295.CANPRD01.PROD.OUTLOOK.COM?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CANhJoDxPaPSVtzj-Xon8P_nCyQMvRyuf-5NDgeyTx7iLZZymLg%40mail.gmail.com.
