Re: [ansible-project] ansible command on messages

2018-08-10 Thread Jonathan Lozada De La Matta
I think vault its a better option and integrates better. On Fri, Aug 10, 2018 at 1:30 PM Jobin A T. A T. wrote: > Hai please use this method I tested this and it successfully worked > > First generate an encrypted password > Using > > Python code for generating SHA512 password > python -c "from

Re: [ansible-project] ansible command on messages

2018-08-10 Thread Jobin A T. A T.
Hai please use this method I tested this and it successfully worked First generate an encrypted password Using Python code for generating SHA512 password python -c "from passlib.hash import sha512_crypt; import getpass; print sha512_crypt.encrypt(getpass.getpass())" And use tasks: - name: chan

Re: [ansible-project] ansible command on messages

2018-08-10 Thread Alfredo De Luca
no_log worked perfectly! thanks On Fri, Aug 10, 2018 at 1:32 PM Alfredo De Luca wrote: > Thanks heaps. there is also no_target_syslog... which it could be more > appropriate for what I need to do. > > Cheers > > > On Fri, Aug 10, 2018 at 1:15 PM Jonathan Lozada De La Matta < > jloza...@redhat.co

Re: [ansible-project] ansible command on messages

2018-08-10 Thread Alfredo De Luca
Thanks heaps. there is also no_target_syslog... which it could be more appropriate for what I need to do. Cheers On Fri, Aug 10, 2018 at 1:15 PM Jonathan Lozada De La Matta < jloza...@redhat.com> wrote: > have you tried to do no_log: True ? > > > https://docs.ansible.com/ansible/2.5/reference_a

Re: [ansible-project] ansible command on messages

2018-08-10 Thread Jonathan Lozada De La Matta
have you tried to do no_log: True ? https://docs.ansible.com/ansible/2.5/reference_appendices/faq.html#how-do-i-keep-secret-data-in-my-playbook On Fri, Aug 10, 2018 at 7:01 AM Alfredo De Luca wrote: > Hi all. > With ansible we are changing root passwords on our machines. the root > password is

[ansible-project] ansible command on messages

2018-08-10 Thread Alfredo De Luca
Hi all. With ansible we are changing root passwords on our machines. the root password is in a vault so all ok But I find our the the command we run to change the password is visible on /var/log/messages ..included the password itself How can I remove that or do that in a different way? Ch