Puppet Class: winrm::config::allow_unencrypted

Defined in:
manifests/config/allow_unencrypted.pp

Summary

Conifigures winrm service to allows unencrypted traffic to be transfered. https://www.windows-security.org/b39e2859968e78097aed08388fdf7a01/allow-unencrypted-traffic

Overview

Examples:

Usage:

class { 'winrm::config::allow_unencrypted':
  allow_unencrypted_enable => false,
}

Parameters:

  • allow_unencrypted_enable (Boolean) (defaults to: $winrm::allow_unencrypted_enable) —

    Is unencrypted traffic allowed? Default is false.



12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
 
# File 'manifests/config/allow_unencrypted.pp', line 12

class winrm::config::allow_unencrypted (
  Boolean $allow_unencrypted_enable = $winrm::allow_unencrypted_enable,
) {
  if $allow_unencrypted_enable {
    exec { 'Allow-Unencrypted-Traffic':
      command  => 'Set-Item -Path "WSMan:\localhost\Service\AllowUnencrypted" -Value $true',
      unless   => 'If ((Get-ChildItem WSMan:\localhost\Service\AllowUnencrypted).Value -ne $true) { exit 1 }',
      provider => powershell,
    }
  } else {
    exec { 'Block-Unencrypted-Traffic':
      command  => 'Set-Item -Path "WSMan:\localhost\Service\AllowUnencrypted" -Value $false',
      unless   => 'If ((Get-ChildItem WSMan:\localhost\Service\AllowUnencrypted).Value -ne $false) { exit 1 }',
      provider => powershell,
    }
  }
}