ansible over SSH with GSSAPI?

Hello,

Getting my feet wet with Ansible, and the first I run into is I can't
use ansible over SSH with GSSAPI (Kerberos) authentication. I've found
a pointer [1] that paramiko doesn't support GSSAPI.

Am I right that it isn't supported or am I on the wrong track?

Using private SSH keys instead of Kerberos tickets wouldn't be "ideal" :slight_smile:

Regards,

        -JP

[1] https://bugs.launchpad.net/paramiko/+bug/507391

You are right.

We played around with libssh2 as an option though it doesn’t seem mature enough yet (poor response to github tickets, ssh-agent support added just last month).

There may be still some experimental games we can play in the future with (maybe?) invoking SSH directly and some optimizations, though ansible-pull is also a very good solution (uses git+cron, and ansible in local non-ssh mode).

–Michael