Ansible Connection Options for windows remote Server

Spread the Knowledge

Error – Failed to connect to the host via ssh

[root@ip-172-31-12-86 ansible]# ansible all -i inventory -m win_ping
13.233.160.153 | UNREACHABLE! => {
    "changed": false,
    "msg": "Failed to connect to the host via ssh: ssh: connect to host 13.233.160.153 port 22: Connection refused",
    "unreachable": true
}

Solution – You need to set ansible_connection=winrm to connect to windows

[windows]
13.233.160.153
[windows:vars]
ansible_connection=winrm

Error – auth method ssl requires a username

[root@ip-172-31-12-86 ansible]# ansible all -i inventory -m win_ping
13.233.160.153 | UNREACHABLE! => {
    "changed": false,
    "msg": "ssl: auth method ssl requires a username",
    "unreachable": true
}

Solution – You need to set ansible_user and ansible_password to connect to windows remote

[windows]
13.233.160.153
[windows:vars]
ansible_connection=winrm
ansible_user=administrator
ansible_password=”w$y%O.ubjQhQhfa&ME@5=TeEd4Yhfy”
ansible_winrm_scheme=http
ansible_winrm_scheme=https
#Reference
https://docs.ansible.com/ansible/latest/user_guide/windows_winrm.html

Error – certificate verify failed

[root@ip-172-31-12-86 ansible]# ansible all -i inventory -m win_ping
13.233.160.153 | UNREACHABLE! => {
    "changed": false,
    "msg": "ssl: HTTPSConnectionPool(host='13.233.160.153', port=5986): Max retries exceeded with url: /wsman (Caused by SSLError(SSLError(1, u'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)'),))",
    "unreachable": true
}

Solution – You need to set ansible_winrm_transport=basic and ansible_winrm_server_cert_validation=ignore

[windows]
13.233.160.153
[windows:vars]
ansible_user=LocalUsername
ansible_password=Password
ansible_connection=winrm
ansible_winrm_transport=basic
ansible_winrm_server_cert_validation=ignore

winrm set winrm/config/client/auth '@{Basic="true"}'
winrm set winrm/config/service/auth '@{Basic="true"}'

Set-Item -Path WSMan:\localhost\Service\Auth\Basic -Value $true

winrm set winrm/config/service/auth '@{Basic="true"}'
winrm set winrm/config/service '@{AllowUnencrypted="true"}'



ansible_user=Administrator
ansible_password=Raju$123456
ansible_connection=winrm
ansible_winrm_transport=basic
ansible_winrm_scheme=http
ansible_winrm_server_cert_validation=ignore
ansible_port=5985

Ansible Fundamental tutorial by Manish in 2020

Ansible Advance Tutorial for Beginners with Demo 2020 — By DevOpsSchool

Ansible with network module (Part 01) — By DevOpsSchool

Ansible with network module (Part 02) — By DevOpsSchool

Ansible with network module (Part 03) — By DevOpsSchool

Ansible with network module (Part 04) — By DevOpsSchool

Ansible with network module (Part 05) — By DevOpsSchool

Ansible with network module (Part 09) — By DevOpsSchool

Ansible with network module (Part 10) — By DevOpsSchool

Ansible with network module (Part 11) — By DevOpsSchool

Ansible with network module (Part 12) — By DevOpsSchool

Ansible with network module (Part 13) — By DevOpsSchool

Author
Recent Posts

Rajesh Kumar

Mentor for DevOps - DevSecOps - SRE - Cloud - Container & Micorservices at Cotocus

Website - www.RajeshKumar.xyz

I can help in the following:
- DevOps - DevSecOps - SRE
- Continuous Integration & Delivery
- Continuous Deployment & Inspection
- Technical Debt Reduction
- Containerization/Micro Services Using Kubernetes & Docker
- Cloud Migration using AWS-Azure-GoogleCloud
- Enterprise observability