VERY HAPPY ! win_ping.yml now works successfully. So WinRM must be configured correctly. Thew !
We were putting variables into the Windows Inventory Variables section. But we now have a main.yml file. Also thanks to Wei-Yen Tan for suggesting we use kerberos and FQDN on the account [email protected] ! main.yml file --- # Put your variables in here ansible_shell_type: powershell ansible_connection: winrm ansible_port: 5985 ansible_winrm_server_cert_validation: ignore ansible_winrm_transport: kerberos ansible_winrm_kinit_mode: managed ansible_user: [email protected] ansible_password: !vault | $ANSIBLE_VAULT;1.1;AES2561234556678901334964757527852875278 etc Thanks Everyone... Let's move forward ! On Friday, 2 September 2022 at 15:01:24 UTC+1 [email protected] wrote: > Also if it's a domain user should it have the kerberos notation. > [email protected]? By putting in the way that you are it may look like > a local user > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* Wei-Yen Tan <[email protected]> > *Sent:* Saturday, September 3, 2022 1:54:52 AM > *To:* [email protected] <[email protected]> > > *Subject:* Re: [ansible-project] Re: win_ping.yml > Why credssp? > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* 'Nicholas Branson' via Ansible Project < > [email protected]> > *Sent:* Saturday, September 3, 2022 1:53:17 AM > *To:* Ansible Project <[email protected]> > *Subject:* Re: [ansible-project] Re: win_ping.yml > > ansible_shell_type: powershell > ansible_connection: winrm > ansible_port: 5986 > ansible_winrm_server_cert_validation: ignore > ansible_winrm_transport: credssp > ansible_user: svc-ansible > ansible_password: !vault | > $ANSIBLE_VAULT;1.1;AES256 > > 62323666616535333162323461346330666631623661326465313835323465653964666639396364 > > 3433643266303531313637383866653464326639326365620a633136623131343265363830366462 > > 62323539383964316634623666343962313664633434363532306231626437313936646466333662 > > 3162366636313961630a396362663334613363653838326465363465376336333261353134633038 > 6465 > > On Friday, 2 September 2022 at 14:51:10 UTC+1 [email protected] wrote: > > So self signed can cause issues. > If they are domain joined machines any reason why you have not set to > 5985? It's encrypted by kerberos. So no plain text > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* 'Nicholas Branson' via Ansible Project < > [email protected]> > *Sent:* Saturday, September 3, 2022 1:48:38 AM > > *To:* Ansible Project <[email protected]> > *Subject:* Re: [ansible-project] Re: win_ping.yml > Self Signed Certificate > > Strange, I've just looked in Tower, and the Variables in the Windows > Inventory have all disappeared ! > > On Friday, 2 September 2022 at 14:26:13 UTC+1 [email protected] wrote: > > Duo doesn’t block winrm. It intercepts rdp connections. What's the cert > you are using in 5986? Did you set to ignore cert validation? > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* 'Nicholas Branson' via Ansible Project < > [email protected]> > *Sent:* Saturday, September 3, 2022 1:23:46 AM > *To:* Ansible Project <[email protected]> > *Subject:* Re: [ansible-project] Re: win_ping.yml > > hi Wei-Yen Tan > > domain service account, who is a member of local administrators group. > WinRM configured on port 5986 > > Not sure if DUO is blocking things... > > *fatal: [server20]: UNREACHABLE! => {* > 40 > *"changed": false,* > 41 > *"msg": "basic: the specified credentials were rejected by the server",* > 42 > *"unreachable": true* > 43 > > > > > On Friday, 2 September 2022 at 14:11:11 UTC+1 [email protected] wrote: > > Under which port and user? Could be a mismatch > > Get Outlook for iOS <https://aka.ms/o0ukef> > ------------------------------ > *From:* 'Nicholas Branson' via Ansible Project < > [email protected]> > *Sent:* Friday, September 2, 2022 11:50:24 PM > *To:* Ansible Project <[email protected]> > *Subject:* [ansible-project] Re: win_ping.yml > > Hello All, > > So I think WinRM is working on Windows 2019 Server, but the server is > rejecting my Ping request ?? > > > *fatal: [server20]: UNREACHABLE! => {* > 40 > *"changed": false, * > 41 > *"msg": "basic: the specified credentials were rejected by the server", * > 42 > *"unreachable": true* > 43 > > > > > win_ping.yml file > > --- > > - name: win_ping test > > hosts: windows > > become: True > > become_user: ansible > > gather_facts: False > > tasks: > > - name: "test connection" > > ansible.windows.win_ping: > > > > > > > > > > On Thursday, 25 August 2022 at 22:05:23 UTC+1 [email protected] wrote: > > you can exec the script *ConfigureRemotingForAnsible.ps1 *to make sure > that remote options are enabled in windows. > > https://github.com/ansible/ansible/blob/devel/examples/scripts/ConfigureRemotingForAnsible.ps1 > > NOTE: sorry my english!! > El martes, 23 de agosto de 2022 a las 5:43:49 UTC-4, > [email protected] escribió: > > I am still holding my Ansible Newbie Keys Tight ! > > Not getting very far with Ansible Tower and Windows. Struggling to even > Ping a Windows Server. I've configured WinRM service settings, Opened > Firewall Port, etc. > > FAILED! msg No setting was provided for required configuration plugin type > become plugin: runas setting: become_user > > win_ping.yml file > --- > - name: win_ping module > hosts: windows > become: true > gather_facts: false > tasks: > - name: test connection > ansible.windows.win_ping: > > vars file > --- > ansible_shell_type: powershell > ansible_user: Iwantmymummy > ansible_password: secret not telling you lot ! > ansible_connection: winrm > ansible_port: 5986 > ansible_winrm_server_cert_validation: ignore > ansible_winrm_transport: credssp > ansible_become_method: runas > > Does anyone know what is wrong and how I can move forward ? > > Many Thanks, > Nick > > > > > DISCLAIMER > > This email is confidential and subject to important disclaimers and > conditions in relation to monitoring, viruses, confidentiality and legal > privilege full details of which can be viewed on our Email Policy at the > following link: http://www.next.co.uk/Policy/ > > Next Holdings Ltd registered in England 35161. Registered Office Desford > Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial > Conduct Authority > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/3f524e59-31bd-48a2-a32c-4772ca6ea9a3n%40googlegroups.com > > <https://groups.google.com/d/msgid/ansible-project/3f524e59-31bd-48a2-a32c-4772ca6ea9a3n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > > > DISCLAIMER > > This email is confidential and subject to important disclaimers and > conditions in relation to monitoring, viruses, confidentiality and legal > privilege full details of which can be viewed on our Email Policy at the > following link: http://www.next.co.uk/Policy/ > > Next Holdings Ltd registered in England 35161. Registered Office Desford > Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial > Conduct Authority > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/f2cebc3c-efd5-4758-b1a4-d1acad8acbdcn%40googlegroups.com > > <https://groups.google.com/d/msgid/ansible-project/f2cebc3c-efd5-4758-b1a4-d1acad8acbdcn%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > > > DISCLAIMER > > This email is confidential and subject to important disclaimers and > conditions in relation to monitoring, viruses, confidentiality and legal > privilege full details of which can be viewed on our Email Policy at the > following link: http://www.next.co.uk/Policy/ > > Next Holdings Ltd registered in England 35161. Registered Office Desford > Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial > Conduct Authority > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/2bfcc73b-72c8-4375-9f33-dae6f8e11657n%40googlegroups.com > > <https://groups.google.com/d/msgid/ansible-project/2bfcc73b-72c8-4375-9f33-dae6f8e11657n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > > > DISCLAIMER > > This email is confidential and subject to important disclaimers and > conditions in relation to monitoring, viruses, confidentiality and legal > privilege full details of which can be viewed on our Email Policy at the > following link: http://www.next.co.uk/Policy/ > > Next Holdings Ltd registered in England 35161. Registered Office Desford > Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial > Conduct Authority > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/932e8ae2-17cc-4901-b736-5bfeeab647bbn%40googlegroups.com > > <https://groups.google.com/d/msgid/ansible-project/932e8ae2-17cc-4901-b736-5bfeeab647bbn%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- DISCLAIMER This email is confidential and subject to important disclaimers and conditions in relation to monitoring, viruses, confidentiality and legal privilege full details of which can be viewed on our Email Policy at the following link: http://www.next.co.uk/Policy/ <http://www.next.co.uk/Policy/> Next Holdings Ltd registered in England 35161. Registered Office Desford Road Enderby Leicester LE19 4AT. Authorised and regulated by the Financial Conduct Authority -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/62b87139-8f68-4bc3-b961-dd2eedc4b5dfn%40googlegroups.com.
