Key authentication doesn't work

[ecke66]

Using version 1.6.0 of the collection, I found that for module powervm_lpar_instance authentication with SSH public/private key does not work. The hscroot user can login to the HMC remotely using keys.

The issue The respective part in the playbook looks like this: ... tasks:

• name: create lpar powervm_lpar_instance: hmc_host: '{{ inventory_hostname }}' hmc_auth: username: '{{ ansible_user }}' ...

Running the playbook, I got this error: ... The full traceback is: File "/tmp/ansible_powervm_lpar_instance_payload_g9343xdc/ansible_powervm_lpar_instance_payload.zip/ansible_collections/ibm/power_hmc/plugins/modules/powervm_lpar_instance.py", line 987, in create_partition File "/tmp/ansible_powervm_lpar_instance_payload_g9343xdc/ansible_powervm_lpar_instance_payload.zip/ansible_collections/ibm/power_hmc/plugins/module_utils/hmc_rest_client.py", line 239, in init self.session = self.logon() File "/tmp/ansible_powervm_lpar_instance_payload_g9343xdc/ansible_powervm_lpar_instance_payload.zip/ansible_collections/ibm/power_hmc/plugins/module_utils/hmc_rest_client.py", line 253, in logon timeout=300) File "/tmp/ansible_powervm_lpar_instance_payload_g9343xdc/ansible_powervm_lpar_instance_payload.zip/ansible/module_utils/urls.py", line 1390, in open_url unredirected_headers=unredirected_headers) File "/tmp/ansible_powervm_lpar_instance_payload_g9343xdc/ansible_powervm_lpar_instance_payload.zip/ansible/module_utils/urls.py", line 1294, in open r = urllib_request.urlopen(urlopen_args) File "/opt/freeware/lib64/python3.7/urllib/request.py", line 222, in urlopen return opener.open(url, data, timeout) File "/opt/freeware/lib64/python3.7/urllib/request.py", line 531, in open response = meth(req, response) File "/opt/freeware/lib64/python3.7/urllib/request.py", line 641, in http_response 'http', request, response, code, msg, hdrs) File "/opt/freeware/lib64/python3.7/urllib/request.py", line 569, in error return self._call_chain(args) File "/opt/freeware/lib64/python3.7/urllib/request.py", line 503, in _call_chain result = func(*args) File "/opt/freeware/lib64/python3.7/urllib/request.py", line 649, in http_error_default raise HTTPError(req.full_url, code, msg, hdrs, fp) fatal: [XXXXXXXX]: FAILED! => { "changed": false, "invocation": { "module_args": { "action": null, "advanced_info": null, "all_resources": null, "delete_vdisks": null, "hmc_auth": { "password": null, "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER" }, ... "msg": "PMCSS007: The authorization filter did not detect a valid session. Access has been denied. Check the allow remote access via the web setting in the console user properties, or check the request for a valid session id. "

Expected behavior Playbook is being executed on HMC. The same authentication scheme is working without problems using module hmc_command.

Environment

• HMC: V9R2 M953
• Python Version: 3.7.12
• OpenSSH Version: 8.1
• Ansible control host: AIX 7.2TL5SP4

[AnilVijayan]

HMC REST API wont support passwordless login (login using ssh keys) . Since powervm_lpar_instance module rely on REST API, it wont support this. And hmc_command is purely CLI based module, hence it support passwordless.

[ecke66]

Thanks, that explains it. Tried with password, it does not work either in our case. The password contains a "(" character, which leads to:

The full traceback is: File "/tmp/ansible_powervm_lpar_instance_payload_th83x584/ansible_powervm_lpar_instance_payload.zip/ansible_collections/ibm/power_hmc/plugins/modules/powervm_lpar_instance.py", line 1076, in create_partition File "/tmp/ansible_powervm_lpar_instance_payload_th83x584/ansible_powervm_lpar_instance_payload.zip/ansible_collections/ibm/power_hmc/plugins/module_utils/hmc_resource.py", line 31, in listHMCVersion result = self.hmcconn.execute(lshmcCmd) File "/tmp/ansible_powervm_lpar_instance_payload_th83x584/ansible_powervm_lpar_instance_payload.zip/ansible_collections/ibm/power_hmc/plugins/module_utils/hmc_cli_client.py", line 71, in execute raise HmcError(errMsg) fatal: [XXXXXXXX]: FAILED! => { "changed": false, "invocation": { "module_args": { "action": null, "advanced_info": null, "all_resources": null, "delete_vdisks": null, "hmc_auth": { "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "username": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER" }, ... "msg": "HmcError: b\"/bin/sh: 0403-057 Syntax error at line 1 : `(' is not expected.\""

[AnilVijayan]

This looks like any issue. Will drop the fix along with Dec release. As a work around you may proceed with escape character like: pass\(\)word