Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Credentials from rundeck keystore incorrect when password begins with character "*" for Windows #407

Open
pts-aut opened this issue Jan 28, 2025 · 0 comments

Comments

@pts-aut
Copy link

pts-aut commented Jan 28, 2025

When the Password used for windows connections (winrm) is starting with an "*" - the ansible connection is failing. rundeck WinRM connection is working fine.

When the "*" is not the first Character - everything is fine.

Error-Output:

  • With Kerberos-Auth:
    "msg": "Kerberos auth failure for principal user@DOMAIN.LOCAL with subprocess: user@DOMAIN.LOCAL's Password: \nkinit: Password incorrect",
  • With NTLM-Auth:
    'unreachable': True, 'msg': 'ntlm: the specified credentials were rejected by the server',

Looks like there is a problem reading the password here.

Node Defintion:
Node-Details in rundeck:
with Kerberos:

    "node_name@default": {
        "ansible-credentials-storage-path": "keys/winrm/ad_user/password",
        "file-copier": "overthere-winrm",
        "node-executor": "overthere-winrm",
        "osFamily": "windows",
        "osName": "Windows",
        "username": "user@DOMAIN.LOCAL",
        "winrm-auth-type": "kerberos",
        "winrm-cert-trust": "all",
        "winrm-cmd": "PowerShell",
        "winrm-hostname-trust": "all",
        "winrm-kerberos-debug": false,
        "winrm-password-storage-path": "keys/winrm/ad_user/password",
        "winrm-port": "5986",
        "winrm-protocol": "https",
        "winrm-spn-use-http": false

and for NTLM:

    "node_name@default": {
        "ansible-credentials-storage-path": "keys/winrm/default/password",
        "file-copier": "overthere-winrm",
        "file-copy-destination-dir": "c:/temp",
        "node-executor": "overthere-winrm",
        "osFamily": "windows",
        "osName": "Windows",
        "username": "my_user",
        "winrm-auth-type": "ntlm",
        "winrm-cert-trust": "all",
        "winrm-cmd": "PowerShell",
        "winrm-hostname-trust": "all",
        "winrm-kerberos-debug": false,
        "winrm-password-storage-path": "keys/winrm/default/password",
        "winrm-port": "5985",
        "winrm-protocol": "http"
    },

Versions:
rundeck: v5.8.0-20241205
Ansible Module: 4.0.6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant