I've create a simple playbook to test connectivity from my ansible server
to an hp-ux with --ask-become-pass module, and seem not to work.
What I can see follows:
The playbook is:
ansible/playbooks $ cat TPAM.yml
---
- hosts: all
gather_facts: no
become: yes
become_method: su
become_user: root
tasks:
- name: test uptime
command: uptime
- name: test uname
shell: uname
register: salida
- debug: var=salida.stdout_lines
The output is:
test:/ansible/playbooks $ ansible-playbook -vvvv TPAM.yml --limit ignitep
--ask-pass --ask-become-pass
/usr/lib64/python2.6/site-packages/pycrypto-2.6.1-py2.6-linux-x86_64.egg/Crypto/Util/number.py:57:
PowmInsecureWarning: Not using mpz_powm_sec. You should rebuild using
libgmp >= 5 to avoid timing attack vulnerability.
_warn("Not using mpz_powm_sec. You should rebuild using libgmp >= 5 to
avoid timing attack vulnerability.", PowmInsecureWarning)
Using /etc/ansible/ansible.cfg as config file
SSH password:
SUDO password[defaults to SSH password]:
Loaded callback default of type stdout, v2.0
1 plays in TPAM.yml
PLAY
***************************************************************************
TASK [test uptime]
*************************************************************
task path: /root/home/ansible/playbooks/TPAM.yml:11
<ignitep> ESTABLISH SSH CONNECTION FOR USER: None
<ignitep> SSH: EXEC sshpass -d15 ssh -C -vvv -o ControlMaster=auto -o
ControlPersist=60s -o StrictHostKeyChecking=no -o Port=22 -o
ConnectTimeout=20 -o
ControlPath=/root/home/.ansible/cp/ansible-ssh-%h-%p-%r -tt ignitep
'/bin/sh -c '"'"'( umask 22 && mkdir -p "` echo
$HOME/.ansible/tmp/ansible-tmp-1468485137.48-269929385646625 `" && echo "`
echo $HOME/.ansible/tmp/ansible-tmp-1468485137.48-269929385646625 `" )'"'"''
<ignitep> PUT /tmp/tmpsDJSrg TO
/root/home/hpjsplu/.ansible/tmp/ansible-tmp-1468485137.48-269929385646625/command
<ignitep> SSH: EXEC sshpass -d15 sftp -b - -C -vvv -o ControlMaster=auto -o
ControlPersist=60s -o StrictHostKeyChecking=no -o Port=22 -o
ConnectTimeout=20 -o
ControlPath=/root/home/.ansible/cp/ansible-ssh-%h-%p-%r '[ignite1p]'
<ignitep> ESTABLISH SSH CONNECTION FOR USER: None
<ignitep> SSH: EXEC sshpass -d15 ssh -C -vvv -o ControlMaster=auto -o
ControlPersist=60s -o StrictHostKeyChecking=no -o Port=22 -o
ConnectTimeout=20 -o
ControlPath=/root/home/.ansible/cp/ansible-ssh-%h-%p-%r -tt ignitep
'/bin/sh -c '"'"'su root -c /bin/sh -c '"'"'"'"'"'"'"'"'echo
BECOME-SUCCESS-whqzbeicifjsmstsilrycwbbceaxbbre; /bin/sh -c
'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'LANG=C LC_ALL=C
LC_MESSAGES=C /opt/opsware/agent/bin/python
/root/home/.ansible/tmp/ansible-tmp-1468485137.48-269929385646625/command;
rm -rf "/root/home/.ansible/tmp/ansible-tmp-1468485137.48-269929385646625/"
> /dev/null
2>&1'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"'"''"'"'"'"'"'"'"'"''"'"''
fatal: [ignitep]: FAILED! => {"failed": true, "msg": "Timeout (22s) waiting
for privilege escalation prompt: \r\nLast successful login for root: Thu
Jul 14 12:15:03 MET-1METDST 2016 on pts/0 \r\nLast unsuccessful login for
root: Thu Jul 14 10:32:17 MET-1METDST 2016 \r\n"}
NO MORE HOSTS LEFT
*************************************************************
to retry, use: --limit @TPAM.retry
PLAY RECAP
*********************************************************************
ignitep : ok=0 changed=0 unreachable=0 failed=1
And on the hp-ux side:
[ignitep]/#ps -fu ansible
UID PID PPID C STIME TTY TIME COMMAND
ansible 20327 20326 0 10:31:21 pts/0 0:00 /bin/sh -c su root -c
/bin/sh -c 'echo BECOME-SUCCESS-ctrcszwvfkamwueotlgrsljqrldakowe; /bin/sh
-c '"'"'LANG=C LC_ALL=C LC_MES
ansible 3886 20317 0 12:15:03 pts/2 0:00 sh -c /bin/sh -c 'su root
-c /bin/sh -c '"'"'echo BECOME-SUCCESS-uxzopavnkcvuttztadjubhvoaocplmmi;
/bin/sh -c '"'"'"'"'"'"'"'"
ansible 20326 20317 0 10:31:21 pts/0 0:00 sh -c /bin/sh -c 'su root
-c /bin/sh -c '"'"'echo BECOME-SUCCESS-ctrcszwvfkamwueotlgrsljqrldakowe;
/bin/sh -c '"'"'"'"'"'"'"'"
ansible 4115 20317 0 12:16:22 pts/4 0:00 sh -c /bin/sh -c 'su root
-c /bin/sh -c '"'"'echo BECOME-SUCCESS-lwftyetdxewykflocdwpogkoqaqlesux;
/bin/sh -c '"'"'"'"'"'"'"'"
ansible 3911 3886 0 12:15:03 pts/2 0:00 /bin/sh -c su root -c
/bin/sh -c 'echo BECOME-SUCCESS-uxzopavnkcvuttztadjubhvoaocplmmi; /bin/sh
-c '"'"'LANG=C LC_ALL=C LC_MES
ansible 20332 20330 0 10:31:42 pts/1 0:00 -sh
ansible 4116 4115 0 12:16:22 pts/4 0:00 /bin/sh -c su root -c
/bin/sh -c 'echo BECOME-SUCCESS-lwftyetdxewykflocdwpogkoqaqlesux; /bin/sh
-c '"'"'LANG=C LC_ALL=C LC_MES
and is needed to kill all these processes.
ansible version:
:/ansible/playbooks $ ansible --version
/usr/lib64/python2.6/site-packages/pycrypto-2.6.1-py2.6-linux-x86_64.egg/Crypto/Util/number.py:57:
PowmInsecureWarning: Not using mpz_powm_sec. You should rebuild using
libgmp >= 5 to avoid timing attack vulnerability.
_warn("Not using mpz_powm_sec. You should rebuild using libgmp >= 5 to
avoid timing attack vulnerability.", PowmInsecureWarning)
ansible 2.0.1.0
config file = /etc/ansible/ansible.cfg
configured module search path = /usr/share/my_modules/
On ansible host:
Red Hat Enterprise Linux Server release 6.7 (Santiago)
On client side:
HP-UX ignite1p B.11.31 U ia64 0430496670 unlimited-user license
With ansible it works fine:
ansible/playbooks $ ansible ignitep -m shell -a 'uptime' --ask-pass
--ask-become-pass
/usr/lib64/python2.6/site-packages/pycrypto-2.6.1-py2.6-linux-x86_64.egg/Crypto/Util/number.py:57:
PowmInsecureWarning: Not using mpz_powm_sec. You should rebuild using
libgmp >= 5 to avoid timing attack vulnerability.
_warn("Not using mpz_powm_sec. You should rebuild using libgmp >= 5 to
avoid timing attack vulnerability.", PowmInsecureWarning)
SSH password:
SUDO password[defaults to SSH password]:
ignitep | SUCCESS | rc=0 >>
12:25pm up 8 days, 16:44, 5 users, load average: 0.04, 0.04, 0.03
Any ideas ?
Thanks in advance.
Jesús
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/17fcab0d-653a-4c0f-b0d4-0049333d01cb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
