Why credssp?

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: 'Nicholas Branson' via Ansible Project <[email protected]>
Sent: Saturday, September 3, 2022 1:53:17 AM
To: Ansible Project <[email protected]>
Subject: Re: [ansible-project] Re: win_ping.yml

  ansible_shell_type: powershell
  ansible_connection: winrm
  ansible_port: 5986
  ansible_winrm_server_cert_validation: ignore
  ansible_winrm_transport: credssp
  ansible_user: svc-ansible
  ansible_password: !vault |
            $ANSIBLE_VAULT;1.1;AES256
            
62323666616535333162323461346330666631623661326465313835323465653964666639396364
            
3433643266303531313637383866653464326639326365620a633136623131343265363830366462
            
62323539383964316634623666343962313664633434363532306231626437313936646466333662
            
3162366636313961630a396362663334613363653838326465363465376336333261353134633038
            6465

On Friday, 2 September 2022 at 14:51:10 UTC+1 [email protected] wrote:
So self signed can cause issues.
If they are domain joined machines any reason why you have not set to 5985?  
It's encrypted by kerberos. So no plain text
Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: 'Nicholas Branson' via Ansible Project <[email protected]>
Sent: Saturday, September 3, 2022 1:48:38 AM

To: Ansible Project <[email protected]>
Subject: Re: [ansible-project] Re: win_ping.yml
Self Signed Certificate

Strange, I've just looked in Tower, and the Variables in the Windows Inventory 
have all disappeared !

On Friday, 2 September 2022 at 14:26:13 UTC+1 [email protected] wrote:
Duo doesn’t block winrm. It intercepts rdp connections. What's the cert you are 
using in 5986? Did you set to ignore cert validation?

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: 'Nicholas Branson' via Ansible Project <[email protected]>
Sent: Saturday, September 3, 2022 1:23:46 AM
To: Ansible Project <[email protected]>
Subject: Re: [ansible-project] Re: win_ping.yml

hi  Wei-Yen Tan

domain service account, who is a member of local administrators group.  WinRM 
configured on port 5986

Not sure if DUO is blocking things...

fatal: [server20]: UNREACHABLE! => {
40
"changed": false,
41
"msg": "basic: the specified credentials were rejected by the server",
42
"unreachable": true
43




On Friday, 2 September 2022 at 14:11:11 UTC+1 [email protected] wrote:
Under which port and user? Could be a mismatch

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: 'Nicholas Branson' via Ansible Project <[email protected]>
Sent: Friday, September 2, 2022 11:50:24 PM
To: Ansible Project <[email protected]>
Subject: [ansible-project] Re: win_ping.yml

Hello All,

So I think WinRM is working on Windows 2019 Server, but the server is rejecting 
my Ping request ??


fatal: [server20]: UNREACHABLE! => {
40
"changed": false,
41
"msg": "basic: the specified credentials were rejected by the server",
42
"unreachable": true
43



> win_ping.yml file
> ---
>   - name: win_ping test
>     hosts: windows
>     become: True
>     become_user: ansible
>     gather_facts: False
>     tasks:
>       - name: "test connection"
>         ansible.windows.win_ping:









On Thursday, 25 August 2022 at 22:05:23 UTC+1 [email protected] wrote:
you can exec the script ConfigureRemotingForAnsible.ps1 to make sure that 
remote options are enabled in windows.
https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1

NOTE: sorry my english!!
El martes, 23 de agosto de 2022 a las 5:43:49 UTC-4, [email protected] 
escribió:
I am still holding my Ansible Newbie Keys Tight !

Not getting very far with Ansible Tower and Windows. Struggling to even Ping a 
Windows Server. I've configured WinRM service settings, Opened Firewall Port, 
etc.

FAILED! msg No setting was provided for required configuration plugin type 
become plugin: runas setting: become_user

win_ping.yml file
---
  - name: win_ping module
    hosts: windows
    become: true
    gather_facts: false
    tasks:
      - name: test connection
        ansible.windows.win_ping:

vars file
---
ansible_shell_type: powershell
ansible_user: Iwantmymummy
ansible_password: secret not telling you lot !
ansible_connection: winrm
ansible_port: 5986
ansible_winrm_server_cert_validation: ignore
ansible_winrm_transport: credssp
ansible_become_method: runas

Does anyone know what is wrong and how I can move forward ?

Many Thanks,
Nick





DISCLAIMER

This email is confidential and subject to important disclaimers and conditions 
in relation to monitoring, viruses, confidentiality and legal privilege full 
details of which can be viewed on our Email Policy at the following link: 
http://www.next.co.uk/Policy/

Next Holdings Ltd registered in England 35161.  Registered Office Desford Road 
Enderby Leicester LE19 4AT.  Authorised and regulated by the Financial Conduct 
Authority

--
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/3f524e59-31bd-48a2-a32c-4772ca6ea9a3n%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/3f524e59-31bd-48a2-a32c-4772ca6ea9a3n%40googlegroups.com?utm_medium=email&utm_source=footer>.



DISCLAIMER

This email is confidential and subject to important disclaimers and conditions 
in relation to monitoring, viruses, confidentiality and legal privilege full 
details of which can be viewed on our Email Policy at the following link: 
http://www.next.co.uk/Policy/

Next Holdings Ltd registered in England 35161.  Registered Office Desford Road 
Enderby Leicester LE19 4AT.  Authorised and regulated by the Financial Conduct 
Authority

--
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/f2cebc3c-efd5-4758-b1a4-d1acad8acbdcn%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/f2cebc3c-efd5-4758-b1a4-d1acad8acbdcn%40googlegroups.com?utm_medium=email&utm_source=footer>.



DISCLAIMER

This email is confidential and subject to important disclaimers and conditions 
in relation to monitoring, viruses, confidentiality and legal privilege full 
details of which can be viewed on our Email Policy at the following link: 
http://www.next.co.uk/Policy/

Next Holdings Ltd registered in England 35161.  Registered Office Desford Road 
Enderby Leicester LE19 4AT.  Authorised and regulated by the Financial Conduct 
Authority

--
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/2bfcc73b-72c8-4375-9f33-dae6f8e11657n%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/2bfcc73b-72c8-4375-9f33-dae6f8e11657n%40googlegroups.com?utm_medium=email&utm_source=footer>.



DISCLAIMER

This email is confidential and subject to important disclaimers and conditions 
in relation to monitoring, viruses, confidentiality and legal privilege full 
details of which can be viewed on our Email Policy at the following link: 
http://www.next.co.uk/Policy/

Next Holdings Ltd registered in England 35161.  Registered Office Desford Road 
Enderby Leicester LE19 4AT.  Authorised and regulated by the Financial Conduct 
Authority

--
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
[email protected]<mailto:[email protected]>.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/932e8ae2-17cc-4901-b736-5bfeeab647bbn%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/932e8ae2-17cc-4901-b736-5bfeeab647bbn%40googlegroups.com?utm_medium=email&utm_source=footer>.

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/ME3P282MB35381CF90051442430FD3801AD7A9%40ME3P282MB3538.AUSP282.PROD.OUTLOOK.COM.

Reply via email to