topic Re: Ansible playbooks wont run outside of specific directory in Ansible

Ansible playbooks wont run outside of specific directory

Will_H — Tue, 25 Sep 2018 02:47:22 GMT

Hi, I'm trying to solve this Ansible playbook issue

If my playbooks are in this directory /usr/lib/python2.7/site-packages/ansible/modules/extras

the playbooks run fine.

When using Tower, it puts them in its own folder which is /var/lib/aws/projects/<dynamic>/whatever.yml

and I get the following message (both in tower and when I run locally like below)

I have tried multiple things to try to straiten this out.

Any suggestions?

Re: Ansible playbooks wont run outside of specific directory

PhoneBoy — Tue, 25 Sep 2018 04:11:01 GMT

The error message is telling you what the issue is: namely that when you issue the login message to the Check Point management server, that the fingerprint of the server is not trusted.

You can configure this as part of the login action.

For example, in this playbook quoted here: cpAnsible installation on Ubuntu 16.04 , you see the following:

- hosts: "localhost"
tasks:
- name: "login"
    check_point_mgmt:
      command: login
      parameters:
        username: "{{mgmt_user}}"
        password: "{{mgmt_password}}"
        management: "{{mgmt_server}}"
      fingerprint: "FA:5A:A6:AC:93:D0:BD:69:9E:E1:72:05:1D:73:24:70:29:17:37:C1"
    register: login_response

The CLI command api fingerprint from the management will give you the SHA1 hash you need to add for your management server.

Re: Ansible playbooks wont run outside of specific directory

Will_H — Tue, 25 Sep 2018 07:03:14 GMT

I am doing the following..

---
	- hosts: "localhost"
	tasks:
	- name: "login"
	check_point_mgmt:
	command: login
	parameters:
	username: "{{mgmt_user}}"
	password: "{{mgmt_password}}"
	management: "{{mgmt_server}}"
	domain: "{{mgmt_domain}}"
	fingerprint: "{{mgmt_finger_Print}}"
	register: login_response
	- name: "logout"
	check_point_mgmt:
	command: logout
	session-data: '{{login_response}}'

Re: Ansible playbooks wont run outside of specific directory

PhoneBoy — Tue, 25 Sep 2018 14:50:12 GMT

Ryan Darst‌, any idea?

Re: Ansible playbooks wont run outside of specific directory

Lari_Luoma — Wed, 26 Sep 2018 00:01:59 GMT

Have you defined your library path correctly in /etc/ansible/ansible.cfg?

Re: Ansible playbooks wont run outside of specific directory

Ofir_Shikolski — Wed, 26 Sep 2018 08:08:53 GMT

I'm not using Tower for a very long time, I do not remember that I had issues with that besides the license limitation of the free version

Try this one

- name: "Gather API Fingerprint from the Management Server"
command: "/opt/CPsuite-R80/fw1/bin/api fingerprint |grep SHA1 "
register: api_fingerprint_raw

- name: "Register the output for only the SHA1 fingerprint"
set_fact:
api_fingerprint: "{{ api_fingerprint_raw.stdout.split(' ')[1] }}"

- name: Debug Output
debug:
msg: "Output for API SHA1 {{ api_fingerprint }}"

- name: "login"
check_point_mgmt:
command: login
parameters:
username: "admin"
password: "vpn123"
management: "{{ target }}"
domain: "{{ domain_server }}"
fingerprint: "{{ api_fingerprint }}"
register: login_response

Re: Ansible playbooks wont run outside of specific directory

Will_H — Sat, 29 Sep 2018 18:17:45 GMT

After I fixed my indentation it worked. I had fingerprint: lined up with the parameters section. So its not just for looks?

Re: Ansible playbooks wont run outside of specific directory

PhoneBoy — Sat, 29 Sep 2018 18:55:13 GMT

Correct it's not just for looks.

Indents matter.