cis_5.2.x.yml - 5.2.15 - Fatal error.

[bryansullins]

TASK [RHEL7-CIS : SCORED | 5.2.15 | PATCH | Ensure only strong Key Exchange algorithms are used] ***
fatal: [default]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'kex'\n\nThe error appears to be in 'ansible/roles/RHEL7-CIS/tasks/section_5/cis_5.2.x.yml': line 272, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: "SCORED | 5.2.15 | PATCH | Ensure only strong Key Exchange algorithms are used"\n ^ here\n"}

[uk-bolly]

Hi @bryansullins

If you could check you are using the last version from https://github.com/ansible-lockdown/RHEL7-CIS
The default variables has the kex variable (ssh key exchange) set and i am unable to reproduce your issue.

If you are coming from a previous version, there has been many changes not only CIS requirements but also in the way the playbook runs.

Any information you are able to provide with regard your setup, if the above does not resolve your issue.

uk-bolly

[uk-bolly]

Hi @bryansullins

Have you managed to confirm if the issue still exists for you?

uk-bolly

[bryansullins]

Thank you so much - I did not. I had an internal release that had to happen.

I worked around it by hard-coding the change in one of our other workflow playbooks.

We will try again next quarter. You can close this for now if you like.