Disable authentication methods that weren't specified

cnasten · Nov 27, 2012 · d703f92 · d703f92
1 parent 5a33012
commit d703f92
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/ansible/runner/connection_plugins/ssh.py b/lib/ansible/runner/connection_plugins/ssh.py
@@ -53,6 +53,12 @@ def connect(self):
             self.common_args += ["-o", "Port=%d" % (self.port)]
         if self.runner.private_key_file is not None:
             self.common_args += ["-o", "IdentityFile="+self.runner.private_key_file]
+        if self.runner.remote_pass:
+            self.common_args += ["-o", "GSSAPIAuthentication=no",
+                                 "-o", "PubkeyAuthentication=no"]
+        else:
+            self.common_args += ["-o", "KbdInteractiveAuthentication=no",
+                                 "-o", "PasswordAuthentication=no"]
         self.common_args += ["-o", "User="+self.runner.remote_user]
 
         return self