[ansible-project] Unable to install Windows Updates using Ansible 'win_update' Module

[Dinesh Vashisht]

Hello Team,

We're using the 'win_updates' module for installing Windows updates on 
servers, following is the playbook section:

 tasks:
- name: Applying Security Windows Updates
  win_updates:
category_name:
- SecurityUpdates
- UpdateRollups
whitelist:
- KB2992611
- KB4103730
log_path: C:\ansible_wu.txt
  register: wuout


Even after white listing these updates, they were not installed. Following 
are the logs:

2018-05-09 23:57:46Z Skipping update c5406426-d347-4a93-acbb-e595a00a4fb8 - 
Security Update for Windows Server 2012 (KB2992611) as it was not found in 
the whitelist
2018-05-09 23:57:46Z Skipping update bfdb9786-0c43-40be-ab19-654fc8d32dd8 - 
2018-05 Security Monthly Quality Rollup for Windows Server 2012 for 
x64-based Systems (KB4103730) as it was not found in the whitelist

What could be the reason and how can we resolve this issue?

Thank you,
Dinesh

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/24c48a34-aba5-46ba-b0b7-21e0d8f9e45e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Is there any open source GUI available for Ansible?

[Dinesh Vashisht]

Thank you Brian.

On Thu, May 3, 2018 at 6:46 PM, Brian Coca  wrote:

> https://github.com/ansible/awx
>
>
>
>
> --
> --
> Brian Coca
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Ansible Project" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/ansible-project/DplqDhtf5RM/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/ansible-project/CACVha7cSC9ps9NHhxkrCWUBS8z0%
> 2BXzY6%2Bb7eaKeHgiOeVzKDcQ%40mail.gmail.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CACyQV1_3i3rHeeiXENb%3DJNuSZVMq0RP4PoGYGhTRaMCwJsDuBQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] Is there any open source GUI available for Ansible?

[Dinesh Vashisht]

Team,

Is there any open source GUI available for Ansible?

We have recently implemented Ansible 2.5.0, but the team new to it is not 
comfortable using CLI.

Thank you,

Dinesh

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/833ac26b-3551-4faa-9340-a44683604329%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: Ansible 'win_shell' working on one server and giving error on another:

[Dinesh Vashisht]

Hello Jordan,

As advised, installing WMF 3.0 hotfix KB2842230 solved the problem.

Thank you,
Dinesh Vashisht


On Fri, Apr 20, 2018 at 4:43 AM, Jordan Borean <jborea...@gmail.com> wrote:

> If you have PowerShell 3.0 I would look to see if the WMF 3.0 hotfix KB2842230
> is installed which fixes a memory issue on this version.
>
> I've got a script to do this if you want to use that, otherwise you can
> manually install it yourself https://github.com/jborean93/
> ansible-windows/blob/master/scripts/Install-WMF3Hotfix.ps1.
>
> Thanks
>
> Jordan
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Ansible Project" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/ansible-project/3fjwduMkSn0/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/ansible-project/13e57300-01b6-4de6-a8ee-3d192c5c%40googlegroups.
> com
> <https://groups.google.com/d/msgid/ansible-project/13e57300-01b6-4de6-a8ee-3d192c5c%40googlegroups.com?utm_medium=email_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CACyQV19i8U5j099V_n1um3hai5dhP%2BAurv%2By0DJa0f0cT7cJ2g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] Ansible 'win_shell' working on one server and giving error on another:

[Dinesh Vashisht]

Team,

Ansible 'win_shell' working on one server and giving error on another:

*Success on 'mytest.mydomain.com' with .Net framework 4.5 and PowerShell 4.*

[user@server1]# ansible -i /etc/ansible/hosts windows-servers -m win_shell 
-a 'dir'
mytest.mydomain.com | SUCCESS | rc=0 >>


Directory: C:\Users\Administrator.MYTESTDC1


ModeLastWriteTime Length Name
- -- 
d-r--  2/2/2018   5:11 AMContacts
d-r-- 2/28/2018   1:37 AMDesktop
d-r--  3/8/2018   3:45 AMDocuments
d-r-- 2/28/2018   1:36 AMDownloads
d-r--  2/2/2018   5:11 AMFavorites
d-r--  2/2/2018   5:11 AMLinks
d-r--  2/2/2018   5:11 AMMusic
d-r--  2/2/2018   5:11 AMPictures
d-r--  2/2/2018   5:11 AMSaved Games
d-r--  2/2/2018   5:11 AMSearches
d-r--  2/2/2018   5:11 AMVideos

*Failure o**n '**win01.itnetwork.com' with .Net framework 4.5 and 
PowerShell 3. (other Ansible modules are working **OK**)*

[user@server1]# ansible -i /etc/ansible/hosts WIN01 -m win_shell -a 'dir'
win01.itnetwork.com | FAILED | rc=1 >>
Thread failed to start.
non-zero return code


*Ansible Server Version: 2.5.0*

*Please suggest what could be the reason of error and how it can be 
resolved?*

Thank you,
Dinesh Vashisht

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/e7941faf-5289-4c48-bc69-e9c2304e1aec%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] Can we selectively install Windows Updates with Ansible

[Dinesh Vashisht]

Hello Team,

I am using *win_updates* module in playbook with *Ansible Version 2.4.2.0*.

Have a requirement for Automation of Windows Security and Roll-up updates 
patching, therefore categories selected are: *SecurityUpdates*, 
*UpdateRollups*. Patches identified are:

   - 2018-01 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 
   4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 on Windows Server 2012 for x64 (KB4055265)
   - 2018-04 Security Monthly Quality Rollup for Windows Server 2012 for 
   x64-based Systems (KB4093123)
   - Windows Malicious Software Removal Tool x64 - April 2018 (KB890830)
   

How can we skip installing updates for .NET Framework, because according to 
the previous experience it broke the application installed on server being 
patched.

Thank you,

Dinesh Vashisht

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/7c8ed74d-902b-4111-ba04-b07f5fa70503%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: Cannot enable WinRM remoting on Windows 10 Home Edition

[Dinesh Vashisht]

Thanks  J Hawkesworth,

After correcting the username it worked.

192.168.169.76 | SUCCESS => {
"changed": false,
"ping": "pong"
}

Regards,
Dinesh Vashisht

-- Forwarded message -
From: 'J Hawkesworth' via Ansible Project <ansible-project@googlegroups.com>
Date: Tue, Mar 27, 2018, 20:43
Subject: [ansible-project] Re: Cannot enable WinRM remoting on Windows 10
Home Edition
To: Ansible Project <ansible-project@googlegroups.com>


double check the password is correct - that error implies the
username/password combination doesn't exist or is incorrect on the windows
hosts.

On Tuesday, March 27, 2018 at 4:09:21 PM UTC+1, Dinesh Vashisht wrote:
>
>
> While trying to enable PowerShell removing on Windows 10 Home Edition
> following error displayed:
>
> 192.168.169.76 | UNREACHABLE! => {
> "changed": false,
> "msg": "ssl: the specified credentials were rejected by the server",
> "unreachable": true
> }
>
> The '/etc/ansible/hosts' and 'group_vars' have correct entries.
>
> Any suggestions?
>
> Dinesh Vashisht
>
-- 
You received this message because you are subscribed to a topic in the
Google Groups "Ansible Project" group.
To unsubscribe from this topic, visit https://groups.google.com/d/to
pic/ansible-project/Etiaq0G1VCs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/ms
gid/ansible-project/d3f29b65-6cfb-466b-aafb-e92c4b3693df%40googlegroups.com
<https://groups.google.com/d/msgid/ansible-project/d3f29b65-6cfb-466b-aafb-e92c4b3693df%40googlegroups.com?utm_medium=email_source=footer>
.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CACyQV1_31e_YTy%2Bdume8K%3D2cboWd9dGdCdSYTEJRLd1MHzmDCg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] Cannot enable WinRM remoting on Windows 10 Home Edition

[Dinesh Vashisht]

While trying to enable PowerShell removing on Windows 10 Home Edition 
following error displayed:

192.168.169.76 | UNREACHABLE! => {
"changed": false,
"msg": "ssl: the specified credentials were rejected by the server",
"unreachable": true
}

The '/etc/ansible/hosts' and 'group_vars' have correct entries.

Any suggestions?

Dinesh Vashisht

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/89736651-eabb-4473-9b7b-e34247454a84%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] Are there Ansible modules available for Nutanix and Hyper-V?

[Dinesh Vashisht]

Team,

Are there Ansible modules available for Nutanix and Hyper-V?

For example, can we use Ansible for creating and deleting snapshots on 
Nutanix and Hyper-V?

Thank you,
Dinesh Vashisht

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/04710098-52e6-4200-9c90-efdf98670321%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [ansible-project] Re: Power Shell remoting (WinRM trust) not working with Active Directory Kerberos Authentication

[Dinesh Vashisht]

Thank you Jon,

Your advice worked:

pcijmp1.itrnetwork.com | SUCCESS => {
"changed": false,
"ping": "pong"
}

Regards,
Dinesh Vashisht

On Mon, Feb 26, 2018 at 9:13 PM, 'J Hawkesworth' via Ansible Project <
ansible-project@googlegroups.com> wrote:

> try using
>
> ansible_user: automat...@itrnetwork.com
>
>
> as the user name.  Without this ansible will expect 'automation' to be a
> local user, not a domain user.
>
> Also, if you are wanting to control remote resources (file shares on other
> machines) via ansible and a windows jump host, its worth setting
>
>
> ansible_winrm_kerberos_delegation: yes
>
>
>
>
> ... as well.
>
> If you are just getting started with ansible and windows, this page is
> well worth reading: http://docs.ansible.com/ansible/devel/user_guide/
> windows_usage.html
>
> Hope this helps,
>
> Jon
>
>
> On Monday, February 26, 2018 at 3:25:15 PM UTC, Dinesh Vashisht wrote:
>>
>> Hi All,
>>
>> We are using Ansible Version: 2.4.2.0.
>>
>> Power Shell remoting (WinRM trust) is not working when using Active
>> Directory even after establishing:
>>
>> *Successful Kerberos Authentication*:
>>
>> Default principal: autom...@itrnetwork.com
>>
>> Valid starting   Expires  Service principal
>> 02/26/2018 09:23:25  02/26/2018 19:23:25  krbtgt/ITRNETW...@ITRNETWORK.
>> COM
>> renew until 03/05/2018 09:23:19
>> [root@calam1 group_vars]#
>>
>>
>> *Following are test results:*
>>
>> [root@calam1 group_vars]# ansible windows-jump-servers -m win_ping
>> pcijmp1.itrnetwork.com | UNREACHABLE! => {
>> "changed": false,
>> "msg": "ssl: the specified credentials were rejected by the server",
>> "unreachable": true
>> }
>>
>>
>> *Contents of file /etc/ansible/group_vars/windows-jump-servers.yml:*
>>
>> ansible_user: automation
>> ansible_password: 
>> ansible_port: 5986
>> ansible_connection: winrm
>> ansible_winrm_scheme: https
>> ansible_winrm_server_cert_validation: ignore
>>
>>
>> It works OK with a local user on the same domain joined Windows server.
>>
>> Can someone help to verify cause and advice how to resolve this?
>>
>> Thank you,
>> Dinesh Vashisht
>>
>> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Ansible Project" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/ansible-project/8lcJ_E5q3XE/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/ansible-project/aafbdf69-09ca-4e96-b878-cf9101154791%40googlegroups.
> com
> <https://groups.google.com/d/msgid/ansible-project/aafbdf69-09ca-4e96-b878-cf9101154791%40googlegroups.com?utm_medium=email_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CACyQV1_hGGsViaj0%2Bnw2sXDue9NZ2QT3Gnf9r3%3D%2BRs6ZeWyJhA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[ansible-project] Power Shell remoting (WinRM trust) not working with Active Directory Kerberos Authentication

[Dinesh Vashisht]

Hi All,

We are using Ansible Version: 2.4.2.0.

Power Shell remoting (WinRM trust) is not working when using Active 
Directory even after establishing:

*Successful Kerberos Authentication*:

Default principal: automat...@itrnetwork.com

Valid starting   Expires  Service principal
02/26/2018 09:23:25  02/26/2018 19:23:25  
krbtgt/itrnetwork@itrnetwork.com
renew until 03/05/2018 09:23:19
[root@calam1 group_vars]#


*Following are test results:*

[root@calam1 group_vars]# ansible windows-jump-servers -m win_ping
pcijmp1.itrnetwork.com | UNREACHABLE! => {
"changed": false,
"msg": "ssl: the specified credentials were rejected by the server",
"unreachable": true
}


*Contents of file /etc/ansible/group_vars/windows-jump-servers.yml:*

ansible_user: automation
ansible_password: 
ansible_port: 5986
ansible_connection: winrm
ansible_winrm_scheme: https
ansible_winrm_server_cert_validation: ignore


It works OK with a local user on the same domain joined Windows server.

Can someone help to verify cause and advice how to resolve this?

Thank you,
Dinesh Vashisht

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/1e4a4ae8-7f97-4f30-b4ad-b42ae8939c8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.