Using win_iis_webapppool to update application pool attributes

607 views
Skip to first unread message

philip shangguan

unread,
Nov 11, 2016, 8:31:30 PM11/11/16
to Ansible Project
I am trying to config .NET application pool and I need to change the "Identity" to use "Custom account" and then enter the user name and password. It seems I can not find the correct attribute names to use in the playbook to have those values set. I tried to search them in:


but was not successful. This link seems have the right info. but hard to figure out how to add them into the playbook for "attributes"

Thanks,
Philip



J Hawkesworth

unread,
Nov 14, 2016, 5:21:40 AM11/14/16
to Ansible Project
The only way my colleagues have found to do this is via appcmd.  If you are on ansible 2.2. you could use win_command instead of raw but the rest of the syntax would probably be the same as below:

- name: Add authentication for Site
  raw: 'C:\Windows\System32\inetsrv\appcmd.exe set config "Site/" -section:system.webServer/security/authentication/anonymousAuthentication /enabled:"True" /commit:apphost'

- name: Add authentication user for Site
  raw: 'C:\Windows\System32\inetsrv\appcmd.exe set config "Site/" -section:system.webServer/security/authentication/anonymousAuthentication /userName:{{ iis_domain }}\{{ iis_user }} /password:{{ iis_cred }} /commit:apphost'

HTH

Jon

J Hawkesworth

unread,
Nov 15, 2016, 8:01:50 AM11/15/16
to Ansible Project
By the way, if you have the opportunity, please could you test my changes to win_iis_webappool module here:
the version lets to set enumerated values in the configuration such as 'managedPipelineMode'
and also returns the possible enumeration values in the response.

Many thanks,

Jon

David Norman

unread,
Feb 28, 2017, 8:47:12 AM2/28/17
to ansible...@googlegroups.com
This message was sent securely using ZixCorp.

A ton of fixes for win_iis_webapppool were merged this morning, so they should make Ansible 2.3. Jon now imports C:\Windows\system32\inetsrv\Microsoft.Web.Administration.dll, which is what makes it possible to reach all the indexes we were previously getting undefined.

There's a notable change from how I was doing workarounds for 2.2 and older to use readable strings instead of having to lookup integer values. For example, processModel.identityType:3 will now be processModel.identityType:SpecificUser. Another - managedPipelineMode:0 will be managedPipelineMode:Integrated.

The docs in the pull request note at least one of those in the example output: https://github.com/ansible/ansible/pull/20680


David Norman, Ph.D., CISSP-ISSAP, CSSLP, CIPT
Development Operations Engineer

925 North Point Parkway, Ste 350
Alpharetta, GA 30005
david....@cioxhealth.com
www.cioxhealth.com

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+unsubscribe@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/86d866a6-0a0b-4237-a038-f32e1afdf915%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.


CONFIDENTIALITY NOTICE: The information in this e-mail message, and any attachment, is intended for the sole use of the individual and entity to whom it is addressed. This information may be privileged, confidential, and protected from disclosure. If you are not the intended recipient you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it, or its, contents, is strictly prohibited. If you think that you have received this e-mail message in error please e-mail the sender and destroy all copies of this communication and any attachments. Thank you.


-------------------------------------------------------------------------
This message was secured by ZixCorp(R).
Reply all
Reply to author
Forward
0 new messages