Sunday, 28 June 2020

ssh : Permission denied (publickey,gssapi-with-mic)




[root@ansible kube-cluster]# vi /etc/ssh/sshd_config


# To disable tunneled clear text passwords, change to no here!

PasswordAuthentication yes




[root@ansible kube-cluster]# service sshd restart

Saturday, 20 June 2020

Windows host through SSH bastion on Ansible



Pre requisite :

install the required Python packages pip install ansible pypsrp requests[socks]

command to route traffic 

ssh -o "ControlMaster=auto" -o "ControlPersist=no" -o "ControlPath=~/.ssh/cp/ssh-%r@%h:%p" -CfNq -D 127.0.0.1:2222 -p 2222 root@<bastion server IP>

[windowstarget]
<IP>
[windowstarget:vars]
ansible_user=<domain>\<username>
ansible_password=<password>
ansible_connection=psrp
ansible_psrp_protocol=http
ansible_psrp_proxy=socks5h://localhost:2222








REF#

Ansible inventory to connect juniper switch


[juniperswitch]
<IP>

[juniperswitch:vars]
ansible_connection=netconf
ansible_network_os=junos
ansible_user=<IP>
ansible_python_interpreter=/usr/bin/python2.7
ansible_password=<Password>

Ansible inventory to connect cisco router



[ciscorouter]
<IP>

[ciscorouter:vars]
ansible_connection=network_cli
ansible_become=yes
ansible_become_method=enable
ansible_network_os=ios
ansible_user=<username>
ansible_password=<password>
ansible_python_interpreter=/usr/bin/python2.7

Ansible inventory to connect vsphere firewall



ansible_user=<username>@vsphere.local
ansible_password=<password>
ansible_connection=winrm
ansible_port=5985
ansible_winrm_transport=ntlm
ansible_winrm_server_cert_validation=ignore
ansible_winrm_scheme=http

Ansible inventory to connect Paloalto firewall



ansible_user=<username>
ansible_password=<password>
ansible_network_os=eos
ansible_connection=network_cli
#ansible_httpapi_use_ssl=False
#ansible_httpapi_validate_certs=False

Ansible inventory to connect Windows host



[windows]
<IP>

[windows_2]

ansible_user=<domain\username>
ansible_password=<password>
ansible_port=<portno>
ansible_connection=winrm
ansible_winrm_server_cert_validation=ignore
#ansible_connection=winrm
#ansible_winrm_transport=kerberos
ansible_winrm_transport=ntlm

Ansible inventory to connect linux host



<IP> ansible_connection=ssh ansible_ssh_pass=<password> ansible_ssh_user=<username>

Configure QPID



Listener 

listener {
    host: 0.0.0.0
    port: 5001
    role: inter-router

Connector

Connector {
    host: public IP
    port: 5001
    role: inter-router

Regex pattern to convert puppet host file to ansible host



puppet cert list --all | egrep "^\+.*" | awk -F"\"" '{ print $2 }' > /etc/ansible/puppet_hosts

Git

1 git add ↳ It lets you add changes from the working directory into the staging area 2 git commit ↳ It lets you save a snapshot of currently...