Limited Time Offer!

For Less Than the Cost of a Starbucks Coffee, Access All DevOpsSchool Videos on YouTube Unlimitedly.
Master DevOps, SRE, DevSecOps Skills!

Enroll Now
Ansible

Ansible Connection Options for windows remote Server

October 31, 2021 1 Comment
ansible-error

Error – Failed to connect to the host via ssh

[root@ip-172-31-12-86 ansible]# ansible all -i inventory -m win_ping
13.233.160.153 | UNREACHABLE! => {
    "changed": false,
    "msg": "Failed to connect to the host via ssh: ssh: connect to host 13.233.160.153 port 22: Connection refused",
    "unreachable": true
}

Solution – You need to set ansible_connection=winrm to connect to windows


[windows]
13.233.160.153
[windows:vars]
ansible_connection=winrm

Error – auth method ssl requires a username

[root@ip-172-31-12-86 ansible]# ansible all -i inventory -m win_ping
13.233.160.153 | UNREACHABLE! => {
    "changed": false,
    "msg": "ssl: auth method ssl requires a username",
    "unreachable": true
}

Solution – You need to set ansible_user and ansible_password to connect to windows remote


[windows]
13.233.160.153
[windows:vars]
ansible_connection=winrm
ansible_user=administrator
ansible_password=”w$y%O.ubjQhQhfa&ME@5=TeEd4Yhfy”

ansible_winrm_scheme=http
ansible_winrm_scheme=https
#Reference
https://docs.ansible.com/ansible/latest/user_guide/windows_winrm.html

Error – certificate verify failed

[root@ip-172-31-12-86 ansible]# ansible all -i inventory -m win_ping
13.233.160.153 | UNREACHABLE! => {
    "changed": false,
    "msg": "ssl: HTTPSConnectionPool(host='13.233.160.153', port=5986): Max retries exceeded with url: /wsman (Caused by SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),))",
    "unreachable": true
}

Solution – You need to set ansible_winrm_transport=basic and ansible_winrm_server_cert_validation=ignore


[windows]
13.233.160.153
[windows:vars]
ansible_user=LocalUsername
ansible_password=Password
ansible_connection=winrm
ansible_winrm_transport=basic
ansible_winrm_server_cert_validation=ignore

winrm set winrm/config/client/auth '@{Basic="true"}'
winrm set winrm/config/service/auth '@{Basic="true"}'

Set-Item -Path WSMan:\localhost\Service\Auth\Basic -Value $true

winrm set winrm/config/service/auth '@{Basic="true"}'
winrm set winrm/config/service '@{AllowUnencrypted="true"}'



ansible_user=Administrator
ansible_password=Raju$123456
ansible_connection=winrm
ansible_winrm_transport=basic
ansible_winrm_scheme=http
ansible_winrm_server_cert_validation=ignore
ansible_port=5985
Rajesh Kumar
Follow me
Latest posts by Rajesh Kumar (see all)
Subscribe
Notify of
guest
1 Comment
Newest
Oldest Most Voted
Inline Feedbacks
View all comments
Abhinav Verma
Abhinav Verma
2 years ago

Thanks Author. THis article helped me overcome the issue.
God bless you and your family

0
1
0
Would love your thoughts, please comment.x
()
x