Kerberos is by far the best authentication method to use but unfortunately that only works for domain accounts. If you need to use local accounts, CredSSP is ok but you do need to be aware of the unconstrained delegation of credentials it introduces. In the end if you need to auth with a local account your should be doing it over https which negates some of the security concerns with things like ntlm or basic auth because the whole http payload is encrypted.
-- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To post to this group, send email to ansible-project@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/be86a2cd-a55b-4112-92e7-1c7fd054b265%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
