Vault encrypting password over the network or just locally
20 views
Skip to first unread message
boncalo mihai
unread,
Feb 25, 2019, 8:34:45 AM2/25/19
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ansible...@googlegroups.com
Hi,
I'm trying to secure my ansible playbook and one of the steps is
securing the password. I know that I can store the password encrypted
inside ansible vault and than use directly from the vault and send it
over the network (e.g. change pass) but the question is, the password
is decrypted and sent through the network(plain text) or encrypted and
encrypted at the destination ?
Thanks,
Mihai.
boncalo mihai
unread,
Feb 27, 2019, 5:35:50 PM2/27/19
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ansible...@googlegroups.com
Does anyone know?
Kai Stian Olstad
unread,
Feb 27, 2019, 5:45:59 PM2/27/19
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ansible...@googlegroups.com
Ansible uses ssh(on *nix) to the host so the traffic is encrypted.
--
Kai Stian Olstad
boncalo mihai
unread,
Feb 28, 2019, 8:30:09 AM2/28/19
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message