By default, SSH disable password authentication with a line ‘PasswordAuthentication no’ - What if we want to undo that?
- name: allow ssh passwords part 1
lineinfile:
dest: /etc/ssh/sshd_config
state: absent
regexp: "PasswordAuthentication\s*no"
notify: restart sshd
- name: allow ssh passwords part 2
state: present
regexp: "PasswordAuthentication yes"
line: "PasswordAuthentication yes"
handlers:
- name: restart sshd
service: name=sshd state=restarted
First make sure that ‘PasswordAuthentication no’ is not present.
Then check to see if ‘PasswordAuthentication yes’ is present; if it is not, add it.
Note the ‘notify’ and the entry in ‘handlers’. This will let us restart the SSH service *if the config file was changed*.

ansible