I think vault its a better option and integrates better. On Fri, Aug 10, 2018 at 1:30 PM Jobin A T. A T. <jobin...@ipsrsolutions.com> wrote:
> Hai please use this method I tested this and it successfully worked > > First generate an encrypted password > Using > > Python code for generating SHA512 password > python -c "from passlib.hash import sha512_crypt; import getpass; print > sha512_crypt.encrypt(getpass.getpass())" > > And use > > > tasks: > - name: changing root password > user: > name: "root" ## Should not have "-" > password: > "$6$rounds=656000$XCYDmKM2Wh6LkAkf$2t/9L0OP4yJgy3wukrahPAM1qZG.SFNoe3eR53 > EqTq1t6.X.9YL78PJ2uje6dAp1Xxt8UqDe.kqj2/9F7bsvM/" > > > > > On Fri, Aug 10, 2018, 6:09 PM Alfredo De Luca <alfredo.del...@gmail.com> > wrote: > >> no_log >> worked perfectly! >> thanks >> >> On Fri, Aug 10, 2018 at 1:32 PM Alfredo De Luca <alfredo.del...@gmail.com> >> wrote: >> >>> Thanks heaps. there is also no_target_syslog... which it could be more >>> appropriate for what I need to do. >>> >>> Cheers >>> >>> >>> On Fri, Aug 10, 2018 at 1:15 PM Jonathan Lozada De La Matta < >>> jloza...@redhat.com> wrote: >>> >>>> have you tried to do no_log: True ? >>>> >>>> >>>> https://docs.ansible.com/ansible/2.5/reference_appendices/faq.html#how-do-i-keep-secret-data-in-my-playbook >>>> >>>> On Fri, Aug 10, 2018 at 7:01 AM Alfredo De Luca < >>>> alfredo.del...@gmail.com> wrote: >>>> >>>>> Hi all. >>>>> With ansible we are changing root passwords on our machines. the root >>>>> password is in a vault so all ok.... >>>>> But I find our the the command we run to change the password is >>>>> visible on /var/log/messages ..included the password itself.... >>>>> How can I remove that or do that in a different way? >>>>> >>>>> Cheers >>>>> >>>>> -- >>>>> *Alfredo* >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "Ansible Project" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to ansible-project+unsubscr...@googlegroups.com. >>>>> To post to this group, send email to ansible-project@googlegroups.com. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/d/msgid/ansible-project/CAAWpFTEgV4ZtBakon9EK4qDpYZCgv8b-OCO-hB24x3269_axFw%40mail.gmail.com >>>>> <https://groups.google.com/d/msgid/ansible-project/CAAWpFTEgV4ZtBakon9EK4qDpYZCgv8b-OCO-hB24x3269_axFw%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>> . >>>>> For more options, visit https://groups.google.com/d/optout. >>>>> >>>> >>>> >>>> -- >>>> >>>> Jonathan lozada de la matta >>>> >>>> AUTOMATION CONSULTANT - AUTOMATION PRACTICE >>>> >>>> Red Hat Consulting Services <https://www.redhat.com/> >>>> >>>> jloza...@redhat.com >>>> >>>> >>>> >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Ansible Project" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to ansible-project+unsubscr...@googlegroups.com. >>>> To post to this group, send email to ansible-project@googlegroups.com. >>>> To view this discussion on the web visit >>>> https://groups.google.com/d/msgid/ansible-project/CAFYJA%2BK-NOTJHLYJBtQuQFBLfu7wsXxR-N2ngtSMVFVqsHZYMg%40mail.gmail.com >>>> <https://groups.google.com/d/msgid/ansible-project/CAFYJA%2BK-NOTJHLYJBtQuQFBLfu7wsXxR-N2ngtSMVFVqsHZYMg%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> >>> >>> -- >>> *Alfredo* >>> >>> >> >> -- >> *Alfredo* >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Ansible Project" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ansible-project+unsubscr...@googlegroups.com. >> To post to this group, send email to ansible-project@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ansible-project/CAAWpFTEgx1_hqGidudP7%3DE61xx_Ar4wXEMXKd6bnD62NeOH1DQ%40mail.gmail.com >> <https://groups.google.com/d/msgid/ansible-project/CAAWpFTEgx1_hqGidudP7%3DE61xx_Ar4wXEMXKd6bnD62NeOH1DQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ansible-project+unsubscr...@googlegroups.com. > To post to this group, send email to ansible-project@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CAJndQzPph297vTxXuKzaYz_nLxg%2B9Fh5wDhFeHD1ScwydEaqKg%40mail.gmail.com > <https://groups.google.com/d/msgid/ansible-project/CAJndQzPph297vTxXuKzaYz_nLxg%2B9Fh5wDhFeHD1ScwydEaqKg%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Jonathan lozada de la matta AUTOMATION CONSULTANT - AUTOMATION PRACTICE Red Hat Consulting Services <https://www.redhat.com/> jloza...@redhat.com -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAFYJA%2B%2BZ7emLvYwD3Bu307huPFOKmS6dxBG_RkZjse_GonqESg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.