I have a task defined that sets "remote_user" which has mysteriously
started connecting as "root" instead of my own user account. I've been
using this task for some time, and haven't made any changes that appear
relevant, recently. I'm also using it in a test environment where it is
working normally, and where I can't find any relevant differences.
When I run the playbook containing this task with -vvv, I see ansible
connecting as root, the relevant output is below.
Ansible version:
$ rpm -q ansible
ansible-2.4.1.0-1.el7.noarch
Where can I look in the code to try to determine why remote_user isn't
being set properly?
The task is defined:
- name: check for kerberos ticket
shell: "klist | egrep -q 'Default principal: ({{ \"|\".join(admin_users)
}})@'"
register: has_kerberos_admin
ignore_errors: True
delegate_to: "{{ ipa_server }}"
remote_user: "{{ lookup('env', 'USER') }}"
tags: configuration
Output from -vvv:
TASK [ipa-admin-command : check for kerberos ticket]
*****************************************************************************************************************************************************************************************
task path:
/home/gordon/ansible-example/roles/ipa-admin-command/tasks/main.yml:1
Using module file
/usr/lib/python2.7/site-packages/ansible/modules/commands/command.py
<ds-20170921.private.example.net> ESTABLISH SSH CONNECTION FOR USER: root
<ds-20170921.private.example.net> SSH: EXEC ssh -o ControlMaster=auto -o
ControlPersist=60s -o GSSAPIAuthentication=yes -o
GSSAPIDelegateCredentials=yes -o KbdInteractiveAuthentication=no -o
PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey
-o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o
ControlPath=/home/gordon/.ansible/cp/923a4e9819
ds-20170921.private.example.net '/bin/sh -c '"'"'/usr/bin/python && sleep
0'"'"''
<ds-20170921.private.example.net> (1, '\n{"changed": true, "end":
"2017-12-02 19:26:10.012527", "stdout": "", "cmd": "klist | egrep -q
\'Default principal: (gordon)@\'", "failed": true, "delta":
"0:00:00.012965", "stderr": "klist: Credentials cache keyring
\'persistent:0:0\' not found", "rc": 1, "invocation": {"module_args":
{"warn": true, "executable": null, "_uses_shell": true, "_raw_params":
"klist | egrep -q \'Default principal: (gordon)@\'", "removes": null,
"creates": null, "chdir": null, "stdin": null}}, "start": "2017-12-02
19:26:09.999562", "msg": "non-zero return code"}\n', '')
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/ab555825-26a6-4953-8943-a735c58eacbf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
