psrp – Run tasks over Microsoft PowerShell Remoting Protocol
psrp – Run tasks over Microsoft PowerShell Remoting Protocol
New in version 2.7.
Synopsis
- Run commands or put/fetch on a target via PSRP (WinRM plugin)
- This is similar to the winrm connection plugin which uses the same underlying transport but instead runs in a PowerShell interpreter.
Requirements
The below requirements are needed on the local master node that executes this connection.
- pypsrp (Python library)
Parameters
Parameter | Choices/Defaults | Configuration | Comments |
---|---|---|---|
auth - |
|
var: ansible_psrp_auth |
The authentication protocol to use when authenticating the remote user. The default, |
ca_cert - |
var: ansible_psrp_cert_trust_path var: ansible_psrp_ca_cert |
The path to a PEM certificate chain to use when validating the server's certificate. This value is ignored if cert_validation is set to
| |
cert_validation - |
|
var: ansible_psrp_cert_validation |
Whether to validate the remote server's certificate or not. Set to ca_cert can be set to the path of a PEM certificate chain to use in the validation. |
certificate_key_pem - |
var: ansible_psrp_certificate_key_pem |
The local path to an X509 certificate key to use with certificate auth. | |
certificate_pem - |
var: ansible_psrp_certificate_pem |
The local path to an X509 certificate to use with certificate auth. | |
configuration_name - |
Default: "Microsoft.PowerShell" |
var: ansible_psrp_configuration_name |
The name of the PowerShell configuration endpoint to connect to. |
connection_timeout - |
Default: 30 |
var: ansible_psrp_connection_timeout |
The connection timeout for making the request to the remote host. This is measured in seconds. |
credssp_auth_mechanism - |
|
var: ansible_psrp_credssp_auth_mechanism |
The sub authentication mechanism to use with CredSSP auth. When |
credssp_disable_tlsv1_2 boolean |
|
var: ansible_psrp_credssp_disable_tlsv1_2 |
Disables the use of TLSv1.2 on the CredSSP authentication channel. This should not be set to |
credssp_minimum_version integer |
Default: 2 |
var: ansible_psrp_credssp_minimum_version |
The minimum CredSSP server authentication version that will be accepted. Set to |
ignore_proxy boolean |
|
var: ansible_psrp_ignore_proxy |
Will disable any environment proxy settings and connect directly to the remote host. This option is ignored if |
max_envelope_size - |
Default: 153600 |
var: ansible_psrp_max_envelope_size |
Sets the maximum size of each WSMan message sent to the remote host. This is measured in bytes. Defaults to |
message_encryption - |
|
var: ansible_psrp_message_encryption |
Controls the message encryption settings, this is different from TLS encryption when ansible_psrp_protocol is Only the auth protocols
|
negotiate_delegate - |
var: ansible_psrp_negotiate_delegate |
Allow the remote user the ability to delegate it's credentials to another server, i.e. credential delegation. Only valid when Kerberos was the negotiated auth or was explicitly set as the authentication. Ignored when NTLM was the negotiated auth. | |
negotiate_hostname_override - |
var: ansible_psrp_negotiate_hostname_override |
Override the remote hostname when searching for the host in the Kerberos lookup. This allows Ansible to connect over IP but authenticate with the remote server using it's DNS name. Only valid when Kerberos was the negotiated auth or was explicitly set as the authentication. Ignored when NTLM was the negotiated auth. | |
negotiate_send_cbt boolean |
|
var: ansible_psrp_negotiate_send_cbt |
Send the Channel Binding Token (CBT) structure when authenticating. CBT is used to provide extra protection against Man in the Middle CBT is not used when using just |
negotiate_service - |
Default: "WSMAN" |
var: ansible_psrp_negotiate_service |
Override the service part of the SPN used during Kerberos authentication. Only valid when Kerberos was the negotiated auth or was explicitly set as the authentication. Ignored when NTLM was the negotiated auth. |
operation_timeout - |
Default: 20 |
var: ansible_psrp_operation_timeout |
Sets the WSMan timeout for each operation. This is measured in seconds. This should not exceed the value for |
path - |
Default: "wsman" |
var: ansible_psrp_path |
The URI path to connect to. |
port - |
var: ansible_port var: ansible_psrp_port |
The port for PSRP to connect on the remote target. Default is | |
protocol - |
|
var: ansible_psrp_protocol |
Set the protocol to use for the connection. Default is |
proxy - |
var: ansible_psrp_proxy |
Set the proxy URL to use when connecting to the remote host. | |
read_timeout - added in 2.8 |
Default: 30 |
var: ansible_psrp_read_timeout |
The read timeout for receiving data from the remote host. This value must always be greater than operation_timeout. This option requires pypsrp >= 0.3. This is measured in seconds. |
reconnection_backoff - added in 2.8 |
Default: 2 |
var: ansible_psrp_connection_backoff |
The backoff time to use in between reconnection attempts. (First sleeps X, then sleeps 2*X, then sleeps 4*X, ...) This is measured in seconds. |
reconnection_retries - added in 2.8 |
Default: 0 |
var: ansible_psrp_reconnection_retries |
The number of retries on connection errors. |
remote_addr - |
Default: "inventory_hostname" |
var: ansible_host var: ansible_psrp_host |
The hostname or IP address of the remote host. |
remote_user - |
var: ansible_user var: ansible_psrp_user |
The user to log in as. |
Status
- This connection is not guaranteed to have a backwards compatible interface. [preview]
- This connection is maintained by the Ansible Community. [community]
Authors
- Ansible Core Team
Hint
Configuration entries for each entry type have a low to high priority order. For example, a variable that is lower in the list will override a variable that is higher up.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.8/plugins/connection/psrp.html