50 lines
1.1 KiB
YAML
50 lines
1.1 KiB
YAML
|
---
|
||
|
|
- name: check whether the host supports encryption
|
||
|
|
win_shell: |
|
||
|
|
if ([System.Environment]::OSVersion.Version -lt [Version]"6.2") {
|
||
|
|
"false"
|
||
|
|
} else {
|
||
|
|
"true"
|
||
|
|
}
|
||
|
|
register: encryption_supported_raw
|
||
|
|
|
||
|
|
- name: install pypsexec Python library for tests
|
||
|
|
pip:
|
||
|
|
name: pypsexec
|
||
|
|
state: latest
|
||
|
|
delegate_to: localhost
|
||
|
|
|
||
|
|
- name: define psexec variables
|
||
|
|
set_fact:
|
||
|
|
psexec_hostname: '{{ansible_host}}'
|
||
|
|
psexec_username: '{{ansible_user}}'
|
||
|
|
psexec_password: '{{ansible_password}}'
|
||
|
|
psexec_encrypt: '{{encryption_supported_raw.stdout_lines[0]|bool}}'
|
||
|
|
|
||
|
|
- name: create test rule to allow SMB traffic inbound
|
||
|
|
win_firewall_rule:
|
||
|
|
name: File and Printer Sharing (SMB-In) Test
|
||
|
|
direction: in
|
||
|
|
action: allow
|
||
|
|
localport: 445
|
||
|
|
enabled: yes
|
||
|
|
protocol: tcp
|
||
|
|
program: System
|
||
|
|
profiles:
|
||
|
|
- domain
|
||
|
|
- private
|
||
|
|
- public
|
||
|
|
state: present
|
||
|
|
|
||
|
|
- name: run tests
|
||
|
|
block:
|
||
|
|
- include_tasks: tests.yml
|
||
|
|
|
||
|
|
always:
|
||
|
|
- name: remove test rule that allows SMB traffic inbound
|
||
|
|
win_firewall_rule:
|
||
|
|
name: File and Printer Sharing (SMB-In) Test
|
||
|
|
direction: in
|
||
|
|
action: allow
|
||
|
|
state: absent
|