[ansible-project] SSH to Oracle SBC

[suriravi2002]

Could someone help me here pls

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/29660ee5-4d65-4f8b-9817-4fbe57199908%40googlegroups.com.

Re: [ansible-project] Why doesn't debug get me the output of these commands

[Dick Visser]

Which command did you run, and what output did you get from that (copied as
text, not as images/attachments/screenshots)?



On Mon, 12 Aug 2019 at 23:01, Pro Va  wrote:

> Hello All ,
>
> I am trying to run a playbook that gets me the status of Postfix instances
> running on an email relay server.
>
> my playbook looks like this :
>
>
>
> **
>
>   - name: checking status of Inbound Instance
> command: postmulti -i postfix-in-1 -p status
> register: result
> ignore_errors: yes
> changed_when: False
> become: yes
>
>   - name: showing in-1 status
> debug:
>  var: result.stdout
>
>
>   - name: checking status of Outbound Instance
> shell: /usr/sbin/postmulti -i postfix-out-1 -p status
> register: result2
> become: yes
> changed_when: False
>   - debug: msg="{{ result2.stdout }}"
>
>
>
> ***
>
> i am expecting an output like this , which normally gets written to screen
> when run on the server :
>
> postfix-in-1/postfix-script: the Postfix mail system is running: PID: 8218
> postfix-out-1/postfix-script: the Postfix mail system is running: PID: 7321
>
> but ansible playbook has a null stdout or stdout_lines .
>
> any suggestions appreciated : ) .
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/81645deb-3708-4025-b226-d4296f4ad63f%40googlegroups.com
> 
> .
>
-- 
Sent from a mobile device - please excuse the brevity, spelling and
punctuation.

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CAL8fbwMTuzcZ1czh6uRnpEtox%3Da9DEBMUr6faRFhy1CQc2nzUw%40mail.gmail.com.

Re: [ansible-project] Ansible with network equipment (Comware 5 switch)

[Ugo Bellavance]

On Monday, August 12, 2019 at 1:54:23 AM UTC-4, Jonathan Lozada De La Matta 
wrote:
>
> can you provie the playbook file
>
> The playbook is in my original post. 

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/eb7dff85-51fe-4d48-a5d5-a0aabc8c672a%40googlegroups.com.

Re: [ansible-project] Re: Ansible and Azure

[Michael Mullay]

Steve,
Gotcha. Ok, here's the deal. I gave up long ago trying to use Ansible
with Azure even though I love Ansible and try to automate as much as I
can with it. We use terraform now for creating Azure infrastructure,
then Ansible for IaaS-based operations and configuration management. It
seems like you try to run Ansible for Azure infrastructure and you get
an error telling you what module(s) you need to install, then I install
them and it either still doesn't work, or still tells me I don't have
modules which I know I just installed. So basically I just use my az
login, then I have a python script that uses az cli to grab the host
names from Azure and puts them into a simple ini-type ansible hosts
file in groups like you would expect to see a normal ansible hosts
file, eg:
[db]dbhost1dbhost2
[app]apphost1apphost2
etc.
I've even tried using the Azure Cloud Shell which supposedly has
ansible and all the requisite modules installed (since you can't
install any yourself anyway) and it still doesn't seem to work. And
besides, then you are running all of your Ansible automation in the
stupid azure console which is not good for a pipeline or logging or
team use or any kind of good devops workflow.

On Mon, 2019-08-12 at 01:43 -0700, Steve Townsend wrote:
> Thanks for the reply Michael. 
> 
> Basically what I am after is to stop using service principles for
> Ansible. I've recently learnt that you can use Azure CLi to
> authenticate, but our dynamic inventory python script uses service
> principles (the azurerm.py script). 
> 
> I've also seen that Ansible have released an Azure Resource Manager
> inventory plugin. Does that replace the azurerm.py dynamic inventory
> script? If so, how do I configure it to apply playbooks to VMs based
> on tags?
> Thanks!
> 
> On Friday, 9 August 2019 20:53:49 UTC+1, Michael M  wrote:
> > Hi Steve,
> > 
> > 
> > 
> > Not sure if this is what you are asking, but if you just need to
> > find
> > 
> > VMs in Azure by tag, you can do so using az cli like:
> > 
> > 
> > 
> > $ az resource list --tag KEY=VALUE --query [].name
> > 
> > 
> > 
> > I find the API returns resources much faster when using tags.
> > 
> > 
> > 
> > On Fri, Aug 9, 2019 at 7:52 AM Steve Townsend
> > 
> >  wrote:
> > 
> > >
> > 
> > > Another update from me. I've managed to find out that there is a
> > plugin called Azure Resource Manager inventory plugin.
> > 
> > >
> > 
> > > I've created the simple yaml file and now just seeing if I can
> > get it to work. If anybody knows how I can use it to grab VMs from
> > Azure based on tags, I'd love to hear it.
> > 
> > >
> > 
> > > Steve
> > 
> > > On Friday, 9 August 2019 14:52:36 UTC+1, Steve Townsend wrote:
> > 
> > >>
> > 
> > >> Hi All,
> > 
> > >>
> > 
> > >> Thank you for taking a look at my post.
> > 
> > >>
> > 
> > >> I'm trying to figure out if there is a better way to have
> > Ansible authenticate with Azure when running playbooks. Right now,
> > I've got a service principle set in my .azure/credentials section
> > which works fine, but introduces security concerns. The alternative
> > is using Azure AD, but that seems to need your password in clear
> > text.
> > 
> > >>
> > 
> > >> The only solution I can think of is to write a bash script which
> > will create a short lived RBAC Service Principle and export the
> > values to my enviromental variables, run the play-book then get rid
> > of it all.
> > 
> > >>
> > 
> > >> Please somebody tell me there is a magicial way which will work
> > with my az login?
> > 
> > >>
> > 
> > >> Thanks,
> > 
> > >> Steve
> > 
> > >
> > 
> > > --
> > 
> > > You received this message because you are subscribed to the
> > Google Groups "Ansible Project" group.
> > 
> > > To unsubscribe from this group and stop receiving emails from it,
> > send an email to ansible...@googlegroups.com.
> > 
> > > To view this discussion on the web visit 
> > https://groups.google.com/d/msgid/ansible-project/8de21aa8-a61b-431a-8d24-7afeff7a9e63%40googlegroups.com
> > .
> > 
> 
> 
> 
> -- 
> 
> You received this message because you are subscribed to the Google
> Groups "Ansible Project" group.
> 
> To unsubscribe from this group and stop receiving emails from it,
> send an email to ansible-project+unsubscr...@googlegroups.com.
> 
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/ansible-project/f95ffe33-ae6c-4a64-9a18-230dad6f5550%40googlegroups.com
> .
> 

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/238266e851133d5d9a270b454f7c77482c686142.camel%40gmail.com.

Re: [ansible-project] how to stuff running services into a host variable?

[Vladimir Botka]

> > > I can't seem to get this syntax correct, and at least one reference I  
> > > found  
> > > produced more errors.  I'd like to create a list of all running  
> > > processes.  
> > >
> > > - name: populate running services into a list
> > >   set_fact:
> > > services_running: >
> > >   {%  if (hostvars[inventory_hostname]['services']['{{ item
> > > }}']['state'] == 'running')  %}
> > >  services_running + [ '{{ item }}' ]
> > >   {%  endif  %}
> > >   with_items: "{{ hostvars[inventory_hostname]['services'].keys() }}"
> > >  

> > Try this one
> >
> >  - name: populate running services into a list
> >set_fact:
> >  services_running: "{{ services_running|default([]) + [ item ] }}"
> >loop: "{{ services.keys() }}"
> >when: services[item].state == 'running'

On Mon, 12 Aug 2019 17:58:58 -0500
Amos  wrote:
> seems close, but getting:
> 
>   msg: 'Invalid data passed to ''loop'', it requires a list, got this
> instead: dict_keys([''abrt-xorg.service'', ''sshd-keygen.service'',
> ''systemd-machine-id-commit.service'', ''iprinit.servic
> e'', ''systemd-readahead-collect.service'', ''puppet.service'',
> ''plymouth-kexec.service'', ''cgdcbxd.service'', ''console-shell.service'',
> ''rngd.service'', ''sssd-autofs.service'', .

It works for me with Ansible 2.7.9 and Ubuntu 18.04. YMMV.
https://github.com/vbotka/ansible-examples/blob/master/examples/example-009/service_facts_03.yml

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/20190813012646.69712054%40gmail.com.


pgpp1UDeQGydu.pgp
Description: OpenPGP digital signature

Re: [ansible-project] Run ansible as 2 totally speerate users on the same "master" server

[Steven Mething]

Looks good, brilliant, thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/61832614-982a-401a-a541-1982c071ec27%40googlegroups.com.

Re: [ansible-project] how to stuff running services into a host variable?

[Amos]

seems close, but getting:

  msg: 'Invalid data passed to ''loop'', it requires a list, got this
instead: dict_keys([''abrt-xorg.service'', ''sshd-keygen.service'',
''systemd-machine-id-commit.service'', ''iprinit.servic
e'', ''systemd-readahead-collect.service'', ''puppet.service'',
''plymouth-kexec.service'', ''cgdcbxd.service'', ''console-shell.service'',
''rngd.service'', ''sssd-autofs.service'', .



On Mon, Aug 12, 2019 at 3:26 PM Vladimir Botka  wrote:

> On Mon, 12 Aug 2019 14:57:16 -0500
> Amos  wrote:
>
> > I can't seem to get this syntax correct, and at least one reference I
> found
> > produced more errors.  I'd like to create a list of all running
> processes.
> >
> > - name: populate running services into a list
> >   set_fact:
> > services_running: >
> >   {%  if (hostvars[inventory_hostname]['services']['{{ item
> > }}']['state'] == 'running')  %}
> >  services_running + [ '{{ item }}' ]
> >   {%  endif  %}
> >   with_items: "{{ hostvars[inventory_hostname]['services'].keys() }}"
> >
>
> Try this one
>
>  - name: populate running services into a list
>set_fact:
>  services_running: "{{ services_running|default([]) + [ item ] }}"
>loop: "{{ services.keys() }}"
>when: services[item].state == 'running'
>
> Cheers,
>
> -vlado
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CAK2viQUjRgsoZ-j6JMbkrT%3D2tkQ%3DuhOFk5xhqjJdRdS2K1dJaw%40mail.gmail.com.

Re: [ansible-project] Run ansible as 2 totally speerate users on the same "master" server

[Kai Stian Olstad]

On 12.08.2019 22:42, Steven Mething wrote:
The only way I can see is to bypass the default config in 
/etc/ansible/*
and specify where ansible_hosts is on the command line? and run as svc2 
and

not svc1 by default, can this be done?  if so how can I do this?   or
otherwise how can I guarantee complete isolation from production?


Create a directory and in that directory create a ansible.cfg, when you 
run Ansible command cd to this directory first and you have a self 
contained Ansible configuration that you also can have in a source 
control management tool like Git.



--
Kai Stian Olstad

--
You received this message because you are subscribed to the Google Groups "Ansible 
Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/40eea67d0d362a3b4281c2576dc0e0e2%40olstad.com.

[ansible-project] Why doesn't debug get me the output of these commands

[Pro Va]

Hello All ,

I am trying to run a playbook that gets me the status of Postfix instances 
running on an email relay server.

my playbook looks like this :


**

  - name: checking status of Inbound Instance
command: postmulti -i postfix-in-1 -p status
register: result
ignore_errors: yes
changed_when: False
become: yes

  - name: showing in-1 status
debug:
 var: result.stdout


  - name: checking status of Outbound Instance
shell: /usr/sbin/postmulti -i postfix-out-1 -p status
register: result2
become: yes
changed_when: False
  - debug: msg="{{ result2.stdout }}"


***

i am expecting an output like this , which normally gets written to screen 
when run on the server :

postfix-in-1/postfix-script: the Postfix mail system is running: PID: 8218
postfix-out-1/postfix-script: the Postfix mail system is running: PID: 7321

but ansible playbook has a null stdout or stdout_lines .

any suggestions appreciated : ) .

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/81645deb-3708-4025-b226-d4296f4ad63f%40googlegroups.com.

[ansible-project] Run ansible as 2 totally speerate users on the same "master" server

[Steven Mething]

Hi,

I am a newbie trying to migrate from salt to ansible.  I am trying to learn 
how to manage/use ansible but struggling.  Salt has a "seperation model" I 
like and understand but ansible I cant figure out, I guess I am 
contaminated with the "salt way" and cant fathom ansible yet.

Anyway, I have a user configured in ansible as "svc1"  this user runs all 
the production playbooks etc and is configured in /etc/ansible/*  as the 
user to run under as per normal.

I would like to run ansible to build servers as a separate user, "svc2" 
with separate ssh keys and playbooks etc to prevent me "damaging" 1 or more 
production servers by mistake as I know so little.   

So, 

a) I have a second user "svc2".
b) A  /home/svc2/ansible_hosts setup that only has the specific build 
target FQDN in it but when I run an ansible command its looking for 
/home/svc1/ansible_hosts

I need a method on how to work safely.

The only way I can see is to bypass the default config in /etc/ansible/* 
and specify where ansible_hosts is on the command line? and run as svc2 and 
not svc1 by default, can this be done?  if so how can I do this?   or 
otherwise how can I guarantee complete isolation from production? 

regards

Steven


-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/7a6ffcef-c7ab-41d0-87b1-6ec6427baa3f%40googlegroups.com.

Re: [ansible-project] how to stuff running services into a host variable?

[Vladimir Botka]

On Mon, 12 Aug 2019 14:57:16 -0500
Amos  wrote:

> I can't seem to get this syntax correct, and at least one reference I found
> produced more errors.  I'd like to create a list of all running processes.
> 
> - name: populate running services into a list
>   set_fact:
> services_running: >
>   {%  if (hostvars[inventory_hostname]['services']['{{ item
> }}']['state'] == 'running')  %}
>  services_running + [ '{{ item }}' ]
>   {%  endif  %}
>   with_items: "{{ hostvars[inventory_hostname]['services'].keys() }}"
> 

Try this one

 - name: populate running services into a list
   set_fact:
 services_running: "{{ services_running|default([]) + [ item ] }}"
   loop: "{{ services.keys() }}"
   when: services[item].state == 'running'

Cheers,

-vlado

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/2019081619.16b48dd7%40gmail.com.


pgpYpbq3_cmSN.pgp
Description: OpenPGP digital signature

[ansible-project] Re: Issue parsing array from Ansible to Shell Script

[Mohtashim S]

Looks like no one has responded with any suggestion / solution for python 
2.7.x

I would like to repost incase this is ignored.

On Friday, August 9, 2019 at 3:51:21 PM UTC+5:30, Mohtashim S wrote:
>
> The servers are on python 2.7.5
>
> I can't use python 3, btw would like to know the solution for python 3 
> along with a solution for python 2.7.5 ?? 
>
> On Friday, August 9, 2019 at 12:24:27 PM UTC+5:30, Mohtashim S wrote:
>>
>> My requirement is pretty straight forward. 
>>
>> I wish to pass & read a set of string as array from ansible which is 
>> constructed by iterating over using with_items as show below.
>>
>>- name: set_fact
>>  set_fact:
>>fpath: [] 
>>  set_fact:
>>fpath: "{{ fpath + [ BASEPATH ~ '/' ~ vars[item.split('.')[1]] ~ 
>> '/' ~ item | basename ] }}"
>>  with_items:
>>   - "{{ Source_Files.split(',') }}"
>>  vars:
>>   fpath: []
>>
>> Using the set_fact module i collect the strings in a array variable 
>> called 'fpath' and then pass the variable to a shell script using shell 
>> module as below. 
>>
>>- shell: " ~/backup.sh '{{ fpath }}' "
>>
>> The challenge is that the passed string array fpath is unicode and is 
>> read as below in the shell script: 
>>
>> [u/tmp/file.js, u/var/test.txt, u/tmp/llo.rft]
>>
>> Parsing this in unix shell script becomes challenging as evident by my 
>> post to this forum 
>> 
>>  and 
>> I'm looking for a better solution to my requirement. 
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/c8f7fbee-15a8-4e1c-96e7-7675f318e4e2%40googlegroups.com.

[ansible-project] how to stuff running services into a host variable?

[Amos]

I can't seem to get this syntax correct, and at least one reference I found
produced more errors.  I'd like to create a list of all running processes.

- name: populate running services into a list
  set_fact:
services_running: >
  {%  if (hostvars[inventory_hostname]['services']['{{ item
}}']['state'] == 'running')  %}
 services_running + [ '{{ item }}' ]
  {%  endif  %}
  with_items: "{{ hostvars[inventory_hostname]['services'].keys() }}"

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/CAK2viQUzHTxz9Y%2Byw8V2RXy%2Bo7kZrUHFS5FjY2JsXpxdy4KFhg%40mail.gmail.com.

[ansible-project] SSH to Oracle SBC

[suriravi2002]

Hi All,

I am a beginner to Ansible . I tried to connect to Oracle SBC using below 
command ash is failing .But it is successful to normal Linux remote hosts.

Ansible 10.x.x.x -i inventory -u admin -m ping -k -vvv

Output is coming as 

Failed to connect to host via SSH

Please help here

Regards,
Suresh.R.V

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/939d21cb-48bf-4f22-9f4e-ce2f00c68de4%40googlegroups.com.

[ansible-project] Re: winrm send_input failed

[Pramod Thombare]

Hello TOmas ,

I am trying to connect windows through linux master ansible but it 
shows "winrm send_input failed* when i try to ping widows host , will u 
guide me how u did these .*


On Thursday, 19 April 2018 20:05:59 UTC+5:30, Tomas Hradecky wrote:
>
> Hello guys,
>
> I work on Ansible playbook for automatic deployment of LogicMonitor 
> Collector on Windows machine but unfortunately i'm stucked by 
> WinRMOperation TimeoutError. I've configured Windows machine like is said 
> in documentation by script and any other templates which i  tried works 
> well, but here I do not know what next should I try. When I've tried it on 
> Linux machine everything works well but I have to deploy on Windows machine 
> cause of another application which I need there. Playbook, Trace and 
> Group_vars are down bellow. I appreciate every help.
>
> *PLAYBOOK:*
> ---
> - hosts: opsmonitoring
>   gather_facts: False
>   tasks:
> - name: Deploy/verify LogicMonitor collectors
>   logicmonitor:
> target: collector
> action: add
> displayname: "newCollector"
> company: mycompany
> user: myuser
> password: mypassword
>
>
> *TRACE:*
>  [WARNING]: FATAL ERROR DURING FILE TRANSFER: Traceback (most recent call 
> last):   File "/home/opsadmin/.local/lib/python2.7
> /site-packages/ansible/plugins/connection/winrm.py", line 276, in 
> _winrm_exec self._winrm_send_input(self.protocol,
> self.shell_id, command_id, data, eof=is_last)   File 
> "/home/opsadmin/.local/lib/python2.7/site-
> packages/ansible/plugins/connection/winrm.py", line 256, in 
> _winrm_send_input
> protocol.send_message(xmltodict.unparse(rq))   File 
> "/home/opsadmin/.local/lib/python2.7/site-packages/winrm/protocol.py",
> line 256, in send_message raise WinRMOperationTimeoutError() 
> WinRMOperationTimeoutError
>
> fatal: [omsmonitoring-us]: FAILED! => {"msg": "winrm send_input failed"}
> to retry, use: --limit @/etc/ansible/add_collector.retry
>
> *GROUP_VARS:*
> ---
> ansible_port: 5986
> ansible_connection: winrm
> ansible_winrm_server_cert_validation: ignore
> ansible_winrm_transport: basic
> ansible_winrm_operation_timeout_sec: 90
> ansible_winrm_read_timeout_sec: 100
>
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/81412285-cf05-42bd-aafc-9142b7dbfa1f%40googlegroups.com.

[ansible-project] Re: winrm send_input failed

[Pramod Thombare]

On Thursday, 19 April 2018 20:05:59 UTC+5:30, Tomas Hradecky wrote:
>
> Hello guys,
>
> I work on Ansible playbook for automatic deployment of LogicMonitor 
> Collector on Windows machine but unfortunately i'm stucked by 
> WinRMOperation TimeoutError. I've configured Windows machine like is said 
> in documentation by script and any other templates which i  tried works 
> well, but here I do not know what next should I try. When I've tried it on 
> Linux machine everything works well but I have to deploy on Windows machine 
> cause of another application which I need there. Playbook, Trace and 
> Group_vars are down bellow. I appreciate every help.
>
> *PLAYBOOK:*
> ---
> - hosts: opsmonitoring
>   gather_facts: False
>   tasks:
> - name: Deploy/verify LogicMonitor collectors
>   logicmonitor:
> target: collector
> action: add
> displayname: "newCollector"
> company: mycompany
> user: myuser
> password: mypassword
>
>
> *TRACE:*
>  [WARNING]: FATAL ERROR DURING FILE TRANSFER: Traceback (most recent call 
> last):   File "/home/opsadmin/.local/lib/python2.7
> /site-packages/ansible/plugins/connection/winrm.py", line 276, in 
> _winrm_exec self._winrm_send_input(self.protocol,
> self.shell_id, command_id, data, eof=is_last)   File 
> "/home/opsadmin/.local/lib/python2.7/site-
> packages/ansible/plugins/connection/winrm.py", line 256, in 
> _winrm_send_input
> protocol.send_message(xmltodict.unparse(rq))   File 
> "/home/opsadmin/.local/lib/python2.7/site-packages/winrm/protocol.py",
> line 256, in send_message raise WinRMOperationTimeoutError() 
> WinRMOperationTimeoutError
>
> fatal: [omsmonitoring-us]: FAILED! => {"msg": "winrm send_input failed"}
> to retry, use: --limit @/etc/ansible/add_collector.retry
>
> *GROUP_VARS:*
> ---
> ansible_port: 5986
> ansible_connection: winrm
> ansible_winrm_server_cert_validation: ignore
> ansible_winrm_transport: basic
> ansible_winrm_operation_timeout_sec: 90
> ansible_winrm_read_timeout_sec: 100
>
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/76297129-ea15-4239-9f6e-d36176e2596e%40googlegroups.com.

[ansible-project] Re: Ansible with network equipment (Comware 5 switch)

[Shane Carnahan]

Specify the connect fo the host as below:
ansible_connection: network_cli

https://docs.ansible.com/ansible/latest/plugins/connection/network_cli.html


On Monday, August 12, 2019 at 3:30:46 AM UTC-4, Ganesh Nalawade wrote:
>
>
> The module seems to use paramiko_ssh 
>  
> to connect to the remote host.
> Try changing the inventory entry as below since the module is expected to 
> run on the control node.
>
> [switch1]
> 192.168.xx.xx ansible_connection=local
>
> OR
>
> [switch1]
> localhost
>
> Also, this seems to be a very old module and not using the Ansible 
> persistent connection framework.
> You can add Ansible cliconf and terminal plugins for the network os to 
> make it work with connection=network_cli 
> 
> After adding the required plugins you use cli_command  
> and 
> cli_config 
>  
> modules 
> to manage the remote host.
>
> On Friday, 9 August 2019 19:11:17 UTC+5:30, Ugo Bellavance wrote:
>>
>> Hi,
>>
>> I'm new to Ansible.  I wanted to manage my network devices with Ansible 
>> so I did this:
>>
>>- Found this documentation: 
>>http://patg.net/ansible,comware,switches/2014/10/16/ansible-comware/
>>- Created an account on my switch, tested that it can login via SSH 
>>(password only, haven't configured an SSH key yet)
>>- Installed ansible (from EPEL), on RHEL7 (see below for version 
>>details)
>>- Cloned the comware 5.2 module in $HOME/.ansible/plugins/modules (git 
>>clone https://github.com/CaptTofu/comware_5_2.git)
>>- Cloned the Github project to get playbook examples (git clone 
>>https://github.com/CaptTofu/comware_5_2_playbooks.git)
>>- Created an inventory file (see below)
>>- Created a playbook (see below)
>>- Ran ansible-playbook (ansible-playbook -i switch1 -u ansiblehpe 
>>--ask-pass playbook1.yml)
>>- Got this error message
>>   - fatal: [192.168.xx.xx]: FAILED! => {"msg": "module (setup) is 
>>   missing interpreter line"}
>>- So I though I would add the shebang with the path of the python 
>>interpeter on my server running ansible in the setup.py file
>>   - Got these errors: 
>>   -  [WARNING]: Unhandled error in Python interpreter discovery for 
>>  host 192.168.99.41: Failed to connect to the host via ssh:
>>  -  [WARNING]: sftp transfer mechanism failed on 
>>  [192.168.99.41]. Use ANSIBLE_DEBUG=1 to see detailed information
>>  -  [WARNING]: scp transfer mechanism failed on [192.168.99.41]. 
>>  Use ANSIBLE_DEBUG=1 to see detailed information
>>   - I realized ansible wanted to discover where could python be on 
>>the remote target, but there isn't any interpreter there, it's a network 
>>switch...
>>- I set an empty shebang in the setup.py file and got this error
>>   - An exception occurred during task execution. To see the full 
>>   traceback, use -vvv. The error was: IndexError: list index out of range
>>   fatal: [192.168.99.41]: FAILED! => {"msg": "Unexpected failure 
>>   during module execution.", "stdout": ""}
>>
>> How do I tell ansible that there isn't any interpreter on the target?
>>
>> Any help would be appreciated.
>> Thanks in advance.
>>
>> $ ansible --version
>> ansible 2.8.2
>>   config file = /etc/ansible/ansible.cfg
>>   configured module search path = 
>> [u'/home/ubellavance/.ansible/plugins/modules', 
>> u'/usr/share/ansible/plugins/modules']
>>   ansible python module location = 
>> /usr/lib/python2.7/site-packages/ansible
>>   executable location = /usr/bin/ansible
>>   python version = 2.7.5 (default, Jun 11 2019, 12:19:05) [GCC 4.8.5 
>> 20150623 (Red Hat 4.8.5-36)]
>>
>> Inventory file:
>>
>> [switch1]
>> 192.168.xx.xx
>>
>> [switch1:vars]
>> switch_host=192.168.xx.xx
>> switch_user=
>> switch_password=
>>
>> Playbook:
>>
>> - hosts: switch1
>>   tasks:
>>   - name: gather facts from switch
>> comware_5_2:
>>   gather_facts=true
>>   host={{ switch_host }}
>>   username={{ switch_user }}
>>   password={{ switch_password }}
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/b55e08b4-bd49-42b8-ad7e-0346aa439dd0%40googlegroups.com.

[ansible-project] Erroneous playbook failure

[harry devine]

We have a playbook that runs every night that will do a "yum update" on all 
of our servers, then performs an "aide --update" to keep AIDE up to date.  
Whenever a difference is found, Ansible flags it as a fatal error.  The msg 
is "non zero return code" and the rc value is 7.

Here'a sample of the output:

AIDE 0.15.1 found differences between database and filesystem!! Start 
timestamp: 2019-08-12 02:39:23 Summary: Total number of files: 188094 Added 
files: 137 Removed files: 4 Changed files: 16 
--- Added files: 
--- added: 
/bin/insights-client added: /bin/insights-client-run added: 
/bin/redhat-access-insights added: /bin/sha1hmac added: /bin/sha256hmac 
added: /bin/sha384hmac added: /bin/sha512hmac added: 
/boot/initramfs-3.10.0-957.21.2.el7.x86_64.img.bak added: 
/etc/cron.daily/aide.check added: /etc/insights-client added: 
/etc/insights-client/.cache.json added: 
/etc/insights-client/.cache.json.asc added: /etc/insights-client/.exp.sed 
added: /etc/insights-client/.fallback.json added: 
/etc/insights-client/.fallback.json.asc added: 
/etc/insights-client/.insights-core-gpg-sig.etag added: 
/etc/insights-client/.insights-core.etag added: 
/etc/insights-client/.last-upload.results added: 
/etc/insights-client/.lastupload added: /etc/insights-client/.registered 
added: /etc/insights-client/cert-api.access.redhat.com.pem added: 
/etc/insights-client/insights-client.conf added: 
/etc/insights-client/machine-id added: 
/etc/insights-client/redhattools.pub.gpg added: 
/etc/insights-client/rpm.egg added: /etc/insights-client/rpm.egg.asc added: 
/etc/pki/entitlement/7834364010455541223-key.pem added: 
/etc/pki/entitlement/7834364010455541223.pem added: 
/etc/redhat-access-insights added: /etc/redhat-access-insights/.lastupload 
added: /etc/redhat-access-insights/.registered added: 
/etc/redhat-access-insights/machine-id added: 
/etc/redhat-access-insights/redhat-access-insights.conf added: 
/etc/redhat-access-insights/redhat-access-insights.cron added: 
/etc/sysctl.d/99-tcpsack.conf added: /etc/system-fips added: 
/etc/systemd/system/multi-user.target.wants/insights-client.timer added: 
/lib/dracut/dracut.conf.d/40-fips.conf added: /lib/dracut/modules.d/01fips 
added: /lib/dracut/modules.d/01fips/fips-boot.sh added: 
/lib/dracut/modules.d/01fips/fips-noboot.sh added: 
/lib/dracut/modules.d/01fips/fips.sh added: 
/lib/dracut/modules.d/01fips/module-setup.sh added: 
/lib/python2.7/site-packages/insights_client added: 
/lib/python2.7/site-packages/insights_client/__init__.py added: 
/lib/python2.7/site-packages/insights_client/__init__.pyc added: 
/lib/python2.7/site-packages/insights_client/__init__.pyo added: 
/lib/python2.7/site-packages/insights_client/constants.py added: 
/lib/python2.7/site-packages/insights_client/constants.pyc added: 
/lib/python2.7/site-packages/insights_client/constants.pyo added: 
/lib/python2.7/site-packages/insights_client/major_version.py added: 
/lib/python2.7/site-packages/insights_client/major_version.pyc added: 
/lib/python2.7/site-packages/insights_client/major_version.pyo added: 
/lib/python2.7/site-packages/insights_client/run.py added: 
/lib/python2.7/site-packages/insights_client/run.pyc added: 
/lib/python2.7/site-packages/insights_client/run.pyo added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info/PKG-INFO 
added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info/SOURCES.txt 
added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info/dependency_links.txt
 
added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info/entry_points.txt
 
added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info/requires.txt 
added: 
/lib/python2.7/site-packages/insights_client-3.0.3-py2.7.egg-info/top_level.txt 
added: /lib/systemd/system/insights-client.service added: 
/lib/systemd/system/insights-client.timer added: /lib64/hmaccalc added: 
/lib64/hmaccalc/sha1hmac.hmac added: /lib64/hmaccalc/sha256hmac.hmac added: 
/lib64/hmaccalc/sha384hmac.hmac added: /lib64/hmaccalc/sha512hmac.hmac 
added: /root/.ansible added: /root/.ansible/tmp added: 
/root/.cache/imsettings/log.bak added: /root/.gnupg/trustdb.gpg added: 
/root/.local/share/gvfs-metadata/root added: 
/root/.local/share/gvfs-metadata/root-bf61d634.log added: 
/root/.local/share/gvfs-metadata/uuid-a128602d-0ebd-4c04-9260-4e8096c041f8-6ebc08c3.log
 
added: /root/.local/share/keyrings added: 
/root/.local/share/keyrings/login.keyring added: 
/root/.local/share/keyrings/user.keystore added: /root/.ssh/known_hosts 
added: /root/fips_part1.sh added: /root/fips_part2.sh added: /root/temp 
added: /root/temp/gpg.conf added: /root/temp/pubring.gpg added: 
/root/temp/secring.gpg added: /root/temp/trustdb.gpg added: 
/usr/bin/insights-client added: /usr/bin/insights-client-run added: 

Re: [ansible-project] Re: Ansible and Azure

[Steve Townsend]

Thanks for the reply Michael. 

Basically what I am after is to stop using service principles for Ansible. 
I've recently learnt that you can use Azure CLi to authenticate, but our 
dynamic inventory python script uses service principles (the azurerm.py 
script). 

I've also seen that Ansible have released an Azure Resource Manager 
inventory plugin. Does that replace the azurerm.py dynamic inventory 
script? If so, how do I configure it to apply playbooks to VMs based on 
tags?

Thanks!

On Friday, 9 August 2019 20:53:49 UTC+1, Michael M wrote:
>
> Hi Steve, 
>
> Not sure if this is what you are asking, but if you just need to find 
> VMs in Azure by tag, you can do so using az cli like: 
>
> $ az resource list --tag KEY=VALUE --query [].name 
>
> I find the API returns resources much faster when using tags. 
>
> On Fri, Aug 9, 2019 at 7:52 AM Steve Townsend 
> > wrote: 
> > 
> > Another update from me. I've managed to find out that there is a plugin 
> called Azure Resource Manager inventory plugin. 
> > 
> > I've created the simple yaml file and now just seeing if I can get it to 
> work. If anybody knows how I can use it to grab VMs from Azure based on 
> tags, I'd love to hear it. 
> > 
> > Steve 
> > On Friday, 9 August 2019 14:52:36 UTC+1, Steve Townsend wrote: 
> >> 
> >> Hi All, 
> >> 
> >> Thank you for taking a look at my post. 
> >> 
> >> I'm trying to figure out if there is a better way to have Ansible 
> authenticate with Azure when running playbooks. Right now, I've got a 
> service principle set in my .azure/credentials section which works fine, 
> but introduces security concerns. The alternative is using Azure AD, but 
> that seems to need your password in clear text. 
> >> 
> >> The only solution I can think of is to write a bash script which will 
> create a short lived RBAC Service Principle and export the values to my 
> enviromental variables, run the play-book then get rid of it all. 
> >> 
> >> Please somebody tell me there is a magicial way which will work with my 
> az login? 
> >> 
> >> Thanks, 
> >> Steve 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups "Ansible Project" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an email to ansible...@googlegroups.com . 
> > To view this discussion on the web visit 
> https://groups.google.com/d/msgid/ansible-project/8de21aa8-a61b-431a-8d24-7afeff7a9e63%40googlegroups.com.
>  
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/f95ffe33-ae6c-4a64-9a18-230dad6f5550%40googlegroups.com.

[ansible-project] Re: Ansible with network equipment (Comware 5 switch)

[Ganesh Nalawade]

The module seems to use paramiko_ssh 
 to 
connect to the remote host.
Try changing the inventory entry as below since the module is expected to 
run on the control node.

[switch1]
192.168.xx.xx ansible_connection=local

OR

[switch1]
localhost

Also, this seems to be a very old module and not using the Ansible 
persistent connection framework.
You can add Ansible cliconf and terminal plugins for the network os to make 
it work with connection=network_cli 

After adding the required plugins you use cli_command  
and 
cli_config 
 
modules 
to manage the remote host.

On Friday, 9 August 2019 19:11:17 UTC+5:30, Ugo Bellavance wrote:
>
> Hi,
>
> I'm new to Ansible.  I wanted to manage my network devices with Ansible so 
> I did this:
>
>- Found this documentation: 
>http://patg.net/ansible,comware,switches/2014/10/16/ansible-comware/
>- Created an account on my switch, tested that it can login via SSH 
>(password only, haven't configured an SSH key yet)
>- Installed ansible (from EPEL), on RHEL7 (see below for version 
>details)
>- Cloned the comware 5.2 module in $HOME/.ansible/plugins/modules (git 
>clone https://github.com/CaptTofu/comware_5_2.git)
>- Cloned the Github project to get playbook examples (git clone 
>https://github.com/CaptTofu/comware_5_2_playbooks.git)
>- Created an inventory file (see below)
>- Created a playbook (see below)
>- Ran ansible-playbook (ansible-playbook -i switch1 -u ansiblehpe 
>--ask-pass playbook1.yml)
>- Got this error message
>   - fatal: [192.168.xx.xx]: FAILED! => {"msg": "module (setup) is 
>   missing interpreter line"}
>- So I though I would add the shebang with the path of the python 
>interpeter on my server running ansible in the setup.py file
>   - Got these errors: 
>   -  [WARNING]: Unhandled error in Python interpreter discovery for 
>  host 192.168.99.41: Failed to connect to the host via ssh:
>  -  [WARNING]: sftp transfer mechanism failed on [192.168.99.41]. 
>  Use ANSIBLE_DEBUG=1 to see detailed information
>  -  [WARNING]: scp transfer mechanism failed on [192.168.99.41]. 
>  Use ANSIBLE_DEBUG=1 to see detailed information
>   - I realized ansible wanted to discover where could python be on 
>the remote target, but there isn't any interpreter there, it's a network 
>switch...
>- I set an empty shebang in the setup.py file and got this error
>   - An exception occurred during task execution. To see the full 
>   traceback, use -vvv. The error was: IndexError: list index out of range
>   fatal: [192.168.99.41]: FAILED! => {"msg": "Unexpected failure 
>   during module execution.", "stdout": ""}
>
> How do I tell ansible that there isn't any interpreter on the target?
>
> Any help would be appreciated.
> Thanks in advance.
>
> $ ansible --version
> ansible 2.8.2
>   config file = /etc/ansible/ansible.cfg
>   configured module search path = 
> [u'/home/ubellavance/.ansible/plugins/modules', 
> u'/usr/share/ansible/plugins/modules']
>   ansible python module location = /usr/lib/python2.7/site-packages/ansible
>   executable location = /usr/bin/ansible
>   python version = 2.7.5 (default, Jun 11 2019, 12:19:05) [GCC 4.8.5 
> 20150623 (Red Hat 4.8.5-36)]
>
> Inventory file:
>
> [switch1]
> 192.168.xx.xx
>
> [switch1:vars]
> switch_host=192.168.xx.xx
> switch_user=
> switch_password=
>
> Playbook:
>
> - hosts: switch1
>   tasks:
>   - name: gather facts from switch
> comware_5_2:
>   gather_facts=true
>   host={{ switch_host }}
>   username={{ switch_user }}
>   password={{ switch_password }}
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/9fb35535-2c63-4cee-81a1-e2971a510e01%40googlegroups.com.

Re: [ansible-project] Re: Variable is Undefined error

[nandha kumar]

Hello Angel,

i have gone through the document.
The articles talks about the values which can be gathered os gather_Facts.
My case is bit different.Mine is a custom output which i am storing in a
different register
so kindly suggest the way to get a solution for this

Thanks,
Nandhakumar

On Fri, Aug 9, 2019 at 7:11 PM Angel Rengifo Cancino 
wrote:

> As I see, you're trying to use variables from one host or group of hosts
> (cmsserver) from another different group (jobserver). Those variables have
> a name in common but they're still different; you can't use reference them
> as if they were the same.
>
> But I believe this post might help you:
>
>
> https://serverfault.com/questions/638507/how-to-access-host-variable-of-a-different-host-with-ansible
>
> Hope that helps
>
> El viernes, 9 de agosto de 2019, 8:23:59 (UTC-5), nandha kumar escribió:
>>
>> Hello Angel,Dick,
>>
>> Below is my playbook:
>>
>> ***
>> ---
>> - hosts: all
>>   gather_facts: False
>>   roles:
>> - pagefile
>> - name: STOP_Services_CMS
>>   hosts: cmsserver
>>   gather_facts: False
>>   tasks:
>> - name: Get services for Datasevices
>>   win_shell: 'Get-Service | Where {($_.DisplayName -like "*Apache*")
>> -OR ($_.DisplayName -like "*Server Intell*")} | Select-Object Name,
>> DisplayName | ConvertTo-Json'
>>   register: nandhu
>> - name: Stop services of Dataservices
>>   win_service:
>> name: "{{ item.Name }}"
>> state: stopped
>>   with_items: "{{ nandhu.stdout }}"
>> - name: STOP_Services_JS
>>   hosts: jobserver
>>   gather_facts: False
>>   tasks:
>> - name: Stop services in Job servers
>>   win_service:
>> name: DI_JOBSERVICE
>> state: stopped
>>   register: service_status
>> - debug:
>> var: service_status.state
>> - name: reboot the servers
>>   hosts: cmsserver
>>   gather_facts: False
>>   tasks:
>> - name: reboot the CMS_servers
>>   win_reboot:
>>   when: service_status.state == 'stopped'
>>   register: reboot_CMS
>> - name: reboot the_Jobservers
>>   hosts: jobserver
>>   gather_facts: False
>>   tasks:
>> - name: Reboot the Jobs servers
>>   win_reboot:
>>   register: reboot_Jobserver
>>
>> ***
>> in First step ,i am trying to find the pagefile szie in windows servers
>> and changing the page file size as well.
>> that is what the role "pagefile" does.
>> Once the role is completed, services needs to be stopped in all servers
>> in sequence.
>> first in CMS server group and then job_server group.
>>
>> Reboot has to be done,only the registered value is equal to "stopped"
>>
>> Here is the problem comes.
>>  I am getting the registered variable as expected. however, reboot is not
>> happening and failing with undefined register varaible error
>> Please help me to get the issue resolved
>>
>>
>> Thanks,
>> Nandhakumar
>>
>> On Fri, Aug 9, 2019 at 6:46 PM Angel Rengifo Cancino 
>> wrote:
>>
>>> Hi:
>>>
>>> El viernes, 9 de agosto de 2019, 7:49:13 (UTC-5), nandha kumar escribió:

 Hello Team,

 I am trying to use the variable in the following task which i
 registered in the previous task.
 However, i am getting "variable is undefined error"
 Could you please suggest us,what could be the reason

>>>
>>> Please share as much details as possible of your code and the way you
>>> invoke it from CLI. We cannot guess!
>>>
>>> Thanks,
 Nandhakumar

>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Ansible Project" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to ansible...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/ansible-project/ecb14d22-1f56-4740-a818-594026103b93%40googlegroups.com
>>> 
>>> .
>>>
>> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/57879cab-7d2d-4665-92e7-dac93b63e788%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 

Re: [ansible-project] Re: win_dsc UrlAcl and passing int[]

['Richard Payne' via Ansible Project]

I thought so, but will try again to confirm.

On Friday, 9 August 2019 21:03:03 UTC+1, Jordan Borean wrote:
>
> No you are not, the jinja2 block is evaluated before it’s passed to the 
> module so the data will contain the array you are looking for. Did you try 
> it out?

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/fc324560-2067-4d4d-a46c-0d82583fcfd5%40googlegroups.com.