Authentication problem

Hi,

In our environment we have a tool which is used to fetch passwords for servers. Everytime you login, you will have to fetch a password which is randomly generated.
As ansible works on ssh authentication model, is there to use ansible in this model, as we do not save password for servers. Moreover, a tool like puppet authenticates over SSL and does not need login as agent runs on the host.
Please suggest.

ssh keys ?

That's the problemsl. Using ssh keys would be the last hop. We are trying something to integrate with the credential manager.

will be interested to know about this too.
i have similar setup, which is the PAM that store root credentials. So, if ansible can smartly retrieve the key would be good, as this password expire after certain hours.