I know. I use key-based authentication widely but unfortunately, in this case, it's not available for me. There are organization-wide password policies and so on so I'm stuck with rotating passwords.
On Tuesday, October 13, 2020 at 2:19:19 PM UTC+2 Stu wrote: > Can you not put an ssh key on the host? > a single account can have multiple keys > > > > *From:* ansible...@googlegroups.com <ansible...@googlegroups.com> *On > Behalf Of *Go Away > *Sent:* 13 October 2020 12:50 > *To:* Ansible Project <ansible...@googlegroups.com> > *Subject:* [ansible-project] Failing host (or better still - a group of > hosts) after one login failure. > > > > I have (again ;->) a quite unusual situation. > > I have a bunch of hosts to which I connect with ansible to perform some > tasks. The problem is that they are not mine alone and the authentication > is done with password and is based on some central directory service. So I > have a shared account for some servers and since the password gets > aged-out, there may be a situation that my password stored in keepass is no > longer valid. > > If I try to run a playbook against an inventory file consiting of some of > the servers for which the password is no longer valid I end up locking > myself out of the account. So is there a way to make ansible give up on a > host (or even better - on a whole bunch of hosts sharing the same > credentials) if I get even a single login failure? > > > > Best regards, > > MK > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ansible-proje...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/caefeafa-442f-479e-9d93-ef609f08450cn%40googlegroups.com > > <https://groups.google.com/d/msgid/ansible-project/caefeafa-442f-479e-9d93-ef609f08450cn%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- > *Stuart Lowe* > Cloud and Hosting Support Engineer > *Zen Internet* > Team: 01706 902009 > Web: zen.co.uk > > Proud to be a certified B Corporation > > This message is private and confidential. If you have received this > message in error, please notify us and remove it from your system. > > Zen Internet Limited may monitor email traffic data to manage billing, to > handle customer enquiries and for the prevention and detection of fraud. We > may also monitor the content of emails sent to and/or from Zen Internet > Limited for the purposes of security, staff training and to monitor quality > of service. > > Zen Internet Limited is registered in England and Wales, Sandbrook Park, > Sandbrook Way, Rochdale, OL11 1RY Company No. 03101568 VAT Reg No. 686 0495 > 01 > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7d263011-d2b4-474d-851d-343d4397ca92n%40googlegroups.com.
