Ansible Custom Connector Creation or A2A

[Emily Mixon]

I was wondering if anyone has successfully been able to connect CA PAM and Ansible where Ansible is able to pull passwords it requires in its playbook from CA PAM instead of using static passwords that someone puts in once.

[Daniel Yodice]

Our DEV team has used the A2A feature in PAM to access the vault and inject credentials into playbooks.

------------------------------
Senior Info Security Analyst
United Parcel Service
------------------------------

[Kannan Chairman]

I have some sample code that I can share.  I created for 2 use cases.
Lookup Plugin:   To be used in Ansible to lookup password using A2A agents.
Connection Plugin: It is  a modified ssh connection where before connection setup it will get private key from PAM and then use the private key to access target host.  This is meant to manage all ssh keys in PAM.

[Haroon Hanif]

Hi Kannan,

We are looking to set up connection with ansible as well, could you please share the configuration you have done if possible.

Thanks

[Kannan Chairman]

See the attached PDF. Let me know if you need any help.

Attachment(s)

PAMAnsibleIntegration-210322-1540-164.pdf   11 KB 1 version