diff options
| author | Jordan Borean <jborean93@gmail.com> | 2017-02-09 11:00:58 +1000 |
|---|---|---|
| committer | Matt Davis <nitzmahone@users.noreply.github.com> | 2017-02-08 17:00:58 -0800 |
| commit | 719e1840da96c9f84c7c748b70dbae86b0b21447 (patch) | |
| tree | 363e72a2c70ba22b4597001de3923988e1428a11 /examples | |
| parent | 4b90f9cf8955629caa7c78a7fcde9e8d4b22c0d9 (diff) | |
| download | ansible-719e1840da96c9f84c7c748b70dbae86b0b21447.tar.gz | |
Added info on ntlm and credssp, updated configure script for credssp (#21175)
Diffstat (limited to 'examples')
| -rw-r--r-- | examples/scripts/ConfigureRemotingForAnsible.ps1 | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/examples/scripts/ConfigureRemotingForAnsible.ps1 b/examples/scripts/ConfigureRemotingForAnsible.ps1 index 2cdb99773c..be4c8129d9 100644 --- a/examples/scripts/ConfigureRemotingForAnsible.ps1 +++ b/examples/scripts/ConfigureRemotingForAnsible.ps1 @@ -32,12 +32,14 @@ # Updated by Michael Crilly <mike@autologic.cm> # Updated by Anton Ouzounov <Anton.Ouzounov@careerbuilder.com> # Updated by Dag Wieërs <dag@wieers.com> +# Updated by Jordan Borean <jborean93@gmail.com> # # Version 1.0 - 2014-07-06 # Version 1.1 - 2014-11-11 # Version 1.2 - 2015-05-15 # Version 1.3 - 2016-04-04 # Version 1.4 - 2017-01-05 +# Version 1.5 - 2017-02-09 # Support -Verbose option [CmdletBinding()] @@ -47,7 +49,8 @@ Param ( [int]$CertValidityDays = 365, [switch]$SkipNetworkProfileCheck, $CreateSelfSignedCert = $true, - [switch]$ForceNewSSLCert + [switch]$ForceNewSSLCert, + [switch]$EnableCredSSP ) Function Write-Log @@ -258,6 +261,19 @@ Else Write-Verbose "Basic auth is already enabled." } +# If EnableCredSSP if set to true +If ($EnableCredSSP) +{ + # Check for CredSSP authentication + $credsspAuthSetting = Get-ChildItem WSMan:\localhost\Service\Auth | Where {$_.Name -eq "CredSSP"} + If (($credsspAuthSetting.Value) -eq $false) + { + Write-Verbose "Enabling CredSSP auth support." + Enable-WSManCredSSP -role server -Force + Write-Log "Enabled CredSSP auth support." + } +} + # Configure firewall to allow WinRM HTTPS connections. $fwtest1 = netsh advfirewall firewall show rule name="Allow WinRM HTTPS" $fwtest2 = netsh advfirewall firewall show rule name="Allow WinRM HTTPS" profile=any |