Also if it's a domain user should it have the kerberos notation. [email protected]? By putting in the way that you are it may look like a local user
Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Wei-Yen Tan <[email protected]> Sent: Saturday, September 3, 2022 1:54:52 AM To: [email protected] <[email protected]> Subject: Re: [ansible-project] Re: win_ping.yml Why credssp? Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: 'Nicholas Branson' via Ansible Project <[email protected]> Sent: Saturday, September 3, 2022 1:53:17 AM To: Ansible Project <[email protected]> Subject: Re: [ansible-project] Re: win_ping.yml ansible_shell_type: powershell ansible_connection: winrm ansible_port: 5986 ansible_winrm_server_cert_validation: ignore ansible_winrm_transport: credssp ansible_user: svc-ansible ansible_password: !vault | $ANSIBLE_VAULT;1.1;AES256 62323666616535333162323461346330666631623661326465313835323465653964666639396364 3433643266303531313637383866653464326639326365620a633136623131343265363830366462 62323539383964316634623666343962313664633434363532306231626437313936646466333662 3162366636313961630a396362663334613363653838326465363465376336333261353134633038 6465 On Friday, 2 September 2022 at 14:51:10 UTC+1 [email protected] wrote: So self signed can cause issues. If they are domain joined machines any reason why you have not set to 5985? It's encrypted by kerberos. So no plain text Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: 'Nicholas Branson' via Ansible Project <[email protected]> Sent: Saturday, September 3, 2022 1:48:38 AM To: Ansible Project <[email protected]> Subject: Re: [ansible-project] Re: win_ping.yml Self Signed Certificate Strange, I've just looked in Tower, and the Variables in the Windows Inventory have all disappeared ! On Friday, 2 September 2022 at 14:26:13 UTC+1 [email protected] wrote: Duo doesn’t block winrm. It intercepts rdp connections. What's the cert you are using in 5986? Did you set to ignore cert validation? Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: 'Nicholas Branson' via Ansible Project <[email protected]> Sent: Saturday, September 3, 2022 1:23:46 AM To: Ansible Project <[email protected]> Subject: Re: [ansible-project] Re: win_ping.yml hi Wei-Yen Tan domain service account, who is a member of local administrators group. WinRM configured on port 5986 Not sure if DUO is blocking things... fatal: [server20]: UNREACHABLE! => { 40 "changed": false, 41 "msg": "basic: the specified credentials were rejected by the server", 42 "unreachable": true 43 On Friday, 2 September 2022 at 14:11:11 UTC+1 [email protected] wrote: Under which port and user? Could be a mismatch Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: 'Nicholas Branson' via Ansible Project <[email protected]> Sent: Friday, September 2, 2022 11:50:24 PM To: Ansible Project <[email protected]> Subject: [ansible-project] Re: win_ping.yml Hello All, So I think WinRM is working on Windows 2019 Server, but the server is rejecting my Ping request ?? fatal: [server20]: UNREACHABLE! => { 40 "changed": false, 41 "msg": "basic: the specified credentials were rejected by the server", 42 "unreachable": true 43 > win_ping.yml file > --- > - name: win_ping test > hosts: windows > become: True > become_user: ansible > gather_facts: False > tasks: > - name: "test connection" > ansible.windows.win_ping: On Thursday, 25 August 2022 at 22:05:23 UTC+1 [email protected] wrote: you can exec the script ConfigureRemotingForAnsible.ps1 to make sure that remote options are enabled in windows. https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1 NOTE: sorry my english!! El martes, 23 de agosto de 2022 a las 5:43:49 UTC-4, [email protected] escribió: I am still holding my Ansible Newbie Keys Tight ! Not getting very far with Ansible Tower and Windows. Struggling to even Ping a Windows Server. I've configured WinRM service settings, Opened Firewall Port, etc. FAILED! msg No setting was provided for required configuration plugin type become plugin: runas setting: become_user win_ping.yml file --- - name: win_ping module hosts: windows become: true gather_facts: false tasks: - name: test connection ansible.windows.win_ping: vars file --- ansible_shell_type: powershell ansible_user: Iwantmymummy ansible_password: secret not telling you lot ! ansible_connection: winrm ansible_port: 5986 ansible_winrm_server_cert_validation: ignore ansible_winrm_transport: credssp ansible_become_method: runas Does anyone know what is wrong and how I can move forward ? Many Thanks, Nick DISCLAIMER This email is confidential and subject to important disclaimers and conditions in relation to monitoring, viruses, confidentiality and legal privilege full details of which can be viewed on our Email Policy at the following link: http://www.next.co.uk/Policy/ Next Holdings Ltd registered in England 35161. Registered Office Desford Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial Conduct Authority -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/3f524e59-31bd-48a2-a32c-4772ca6ea9a3n%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/3f524e59-31bd-48a2-a32c-4772ca6ea9a3n%40googlegroups.com?utm_medium=email&utm_source=footer>. DISCLAIMER This email is confidential and subject to important disclaimers and conditions in relation to monitoring, viruses, confidentiality and legal privilege full details of which can be viewed on our Email Policy at the following link: http://www.next.co.uk/Policy/ Next Holdings Ltd registered in England 35161. Registered Office Desford Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial Conduct Authority -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/f2cebc3c-efd5-4758-b1a4-d1acad8acbdcn%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/f2cebc3c-efd5-4758-b1a4-d1acad8acbdcn%40googlegroups.com?utm_medium=email&utm_source=footer>. DISCLAIMER This email is confidential and subject to important disclaimers and conditions in relation to monitoring, viruses, confidentiality and legal privilege full details of which can be viewed on our Email Policy at the following link: http://www.next.co.uk/Policy/ Next Holdings Ltd registered in England 35161. Registered Office Desford Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial Conduct Authority -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/2bfcc73b-72c8-4375-9f33-dae6f8e11657n%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/2bfcc73b-72c8-4375-9f33-dae6f8e11657n%40googlegroups.com?utm_medium=email&utm_source=footer>. DISCLAIMER This email is confidential and subject to important disclaimers and conditions in relation to monitoring, viruses, confidentiality and legal privilege full details of which can be viewed on our Email Policy at the following link: http://www.next.co.uk/Policy/ Next Holdings Ltd registered in England 35161. Registered Office Desford Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial Conduct Authority -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/932e8ae2-17cc-4901-b736-5bfeeab647bbn%40googlegroups.com<https://groups.google.com/d/msgid/ansible-project/932e8ae2-17cc-4901-b736-5bfeeab647bbn%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/ME3P282MB353809BE67D0FBE6BFF1435AAD7A9%40ME3P282MB3538.AUSP282.PROD.OUTLOOK.COM.
