I don't believe NTLM credential delegation is supported by WinRM (I've not been able to find anything about it), which means by definition it wouldn't be supported by Ansible either.
That said, I've been experimenting with various mechanisms for become support on Windows (soft target for Ansible 2.3), most of which would get you effectively the same behavior. On Tuesday, July 19, 2016 at 2:01:22 AM UTC-7, J Hawkesworth wrote: > > Just to clarify, delegation here means the ability to pass logged in > credentials along to the remote host so that you can have the same rights > and permssions on the remote host. This lets you do things like use remote > shares in your playbooks. > > You can use NTLM with pywinrm 0.2.0 but I believe the credentials will > only allow you 'single hop' access to a remote machine. You can't then use > resources on other windows machines from the one you are controlling > remotely without delegation, and its my understanding that is only > available via kerberos right now. > Jon > > > > On Monday, July 18, 2016 at 11:00:41 AM UTC+1, Andrea Tartaglia wrote: >> >> I am definitely using NTLM for my windows hosts. I have the following >> packages installed: >> Requests 2.10.0 >> Requests-kerberos 0.10.0 >> Requests-ntlm 0.3.0 >> Pywinrm 0.2.0 >> >> Just make sure you set “ansible_winrm_transport: ntlm” set in your vars. >> You should also set your remote_user in the “DOMAIN\USER” form, if you >> use “user@domain” it should use Kerberos anyway. >> -- >> A. >> >> On 18/07/2016, 10:49, "Karol Olczak" <[email protected] on >> behalf of [email protected]> wrote: >> >> >I am afraid there is only kerberos delegation support ... >> > >> >-- >> >You received this message because you are subscribed to the Google >> Groups "Ansible Project" group. >> >To unsubscribe from this group and stop receiving emails from it, send >> an email to [email protected]. >> >To post to this group, send email to [email protected]. >> >To view this discussion on the web visit >> https://groups.google.com/d/msgid/ansible-project/07911eb9-c7ff-4609-a878-d45b737095f9%40googlegroups.com. >> >> >> >For more options, visit https://groups.google.com/d/optout. >> >> >> -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/d303f7a7-3d97-440a-9ba6-41040030eebd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
