Ansible winrm - Revision history

Busk at 17:16, 10 November 2021

2021-11-10T17:16:15Z

Busk at 18:43, 11 March 2021

2021-03-11T18:43:51Z

Busk at 00:04, 9 March 2021

2021-03-09T00:04:15Z

Busk at 01:40, 24 November 2020

2020-11-24T01:40:37Z

Busk: Created page with "# A way for ansible winrm even if not optimal way You will be better to use https instead of http. I would use ssh if 2019 and above or install openssh on host ``` sudo apt..."

2020-11-24T01:34:20Z

Created page with "# A way for ansible winrm even if not optimal way You will be better to use https instead of http. I would use ssh if 2019 and above or install openssh on host ``` sudo apt..."

New page

# A way for ansible winrm even if not optimal way

You will be better to use https instead of http. I would use ssh if 2019 and above or install openssh on host

```
sudo apt-get gcc libkrb5-dev install krb5-user python3-dev python3-pip python3-venv
```

```
pythonn3 -m venv venv
source venv/bin/activate
pip3 install ansible kerberos pywinrm
```

/etc/krb5.conf
```
[libdefaults]
default_realm = EXAMPLE.COM

# The following krb5.conf variables are only for MIT Kerberos.
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true

fcc-mit-ticketflags = true
```

hosts
```
all:
hosts:
host2
host3
children:
jtest:
hosts:
myhost.example.com:
vars:
ansible_user: myuser
ansible_password: xxxxxxxxxx
ansible_connection: winrm
ansible_winrm_transport: kerberos
ansible_winrm_scheme: http
ansible_port: 5985
# Insecure don't use
# ansible_winrm_message_encryption: never
# ansible_winrm_server_cert_validation: ignore
testhosts:
hosts:
host1:
```

test ping
```
ansible jtest -i hosts -m win_ping
myhost.example.com | SUCCESS => {
"changed": false,
"ping": "pong"
}
```

← Older revision		Revision as of 17:16, 10 November 2021
Line 2:		Line 2:

	You will be better to use https instead of http. I would use ssh if 2019 and above or install openssh on host		You will be better to use https instead of http. I would use ssh if 2019 and above or install openssh on host
		+
		+	https://adamtheautomator.com/ansible-winrm/

@@ Line 5: / Line 5: @@
 ```
-sudo apt-get gcc libkrb5-dev install krb5-user python3-dev python3-pip python3-venv
+sudo apt-get install gcc libkrb5-dev krb5-user python3-dev python3-pip python3-venv
 ```

@@ Line 15: / Line 15: @@
-/etc/krb5.conf
+/etc/krb5.conf - CAPS ARE IMPORTANT https://stackoverflow.com/questions/41922521/using-ansible-on-windows-with-domain-user
 ```
 [libdefaults]
-         default_realm = EXAMPLE.COM
+         default_realm = EXAMPLE.COM  # domain must be captitalized
 # The following krb5.conf variables are only for MIT Kerberos.

@@ Line 46: / Line 46: @@
          ansible_winrm_scheme: http
          ansible_port: 5985
          # Insecure don't use
          # ansible_winrm_message_encryption: never