On 14/06/2022 09:16, 'Shivakumar Venkataswamy' via Ansible Project wrote:
Hi team,
 look at my playbook
---
-  hosts: all
   become: true
   become_user: ansible
   tasks:
   - name: add a user to the list of AllowUsers if not present
     vars:
       usernames:
          - shivakumar.venkataswamy
          - karthik.reddy
          - aman.saxena
     lineinfile:
       path: /etc/ssh/sshd_config
       backrefs: yes
       backup: yes
       state: absent
       regexp: '^AllowUsers((?:(?:\s+\S+(?!\S))(?<!\s{{ usernames 
}}))+\s*?)(\n?)$'
       line: 'AllowUsers\1 shivakumar.venkataswamy karthik.reddy aman.saxena\2'
       validate: /usr/sbin/sshd -t -f %s

Permission denied: '/etc/ssh/sshd_config'

The ansible user can't edit the file, so try "become_user: root" in your task.

Regards
             Racke

I'm facing below error,
SSH password:
1
BECOME password[defaults to SSH password]:
2
3
PLAY [all] 
*********************************************************************12:45:29
4
5
TASK [Gathering Facts] 
*********************************************************12:45:29
6
ok: [172.16.13.254]
7
8
TASK [add a user to the list of AllowUsers if not present] 
*********************12:45:31
9
An exception occurred during task execution. To see the full traceback, use 
-vvv. The error was: IOError: [Errno 13] Permission denied: 
'/etc/ssh/sshd_config'
10
fatal: [172.16.13.254]: FAILED! => {"changed": false, "module_stderr": "Shared connection to 172.16.13.254 closed.\r\n", 
"module_stdout": "Traceback (most recent call last):\r\n File 
\"/home/ansible/.ansible/tmp/ansible-tmp-1655190931.6542027-6944-29566285149733/AnsiballZ_lineinfile.py\", line 102, in <module>\r\n 
_ansiballz_main()\r\n File \"/home/ansible/.ansible/tmp/ansible-tmp-1655190931.6542027-6944-29566285149733/AnsiballZ_lineinfile.py\", line 94, in 
_ansiballz_main\r\n invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)\r\n File 
\"/home/ansible/.ansible/tmp/ansible-tmp-1655190931.6542027-6944-29566285149733/AnsiballZ_lineinfile.py\", line 40, in invoke_module\r\n 
runpy.run_module(mod_name='ansible.modules.files.lineinfile', init_globals=None, run_name='__main__', alter_sys=True)\r\n File \"/usr/lib64/python2.7…
11
12
PLAY RECAP 
*********************************************************************12:45:32
13
172.16.13.254 : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 
ignored=0
--
You received this message because you are subscribed to the Google Groups "Ansible 
Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/551f8529-2fc7-409c-bac9-06216fb7c6d5n%40googlegroups.com
 
<https://groups.google.com/d/msgid/ansible-project/551f8529-2fc7-409c-bac9-06216fb7c6d5n%40googlegroups.com?utm_medium=email&utm_source=footer>.


--
Automation expert - Ansible and friends
Linux administrator & Debian maintainer
Perl Dancer & conference hopper

--
You received this message because you are subscribed to the Google Groups "Ansible 
Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/73f0f858-f5e5-0b8c-cf95-874386d29e98%40linuxia.de.

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to