title: incorrect sudo password ansible
body: <p>In my ansible run i am getting the following error:</p>
  <pre><code>PLAY [test hashi vault] ******************************************************************************************************
  
  TASK [Gathering Facts] *******************************************************************************************************
  /usr/lib/python2.7/site-packages/urllib3/connectionpool.py:988: InsecureRequestWarning: Unverified HTTPS request is being made to host 'vault.domain'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
    InsecureRequestWarning,
  ok: [192.168.1.200]
  
  TASK [show bar] **************************************************************************************************************
  /usr/lib/python2.7/site-packages/urllib3/connectionpool.py:988: InsecureRequestWarning: Unverified HTTPS request is being made to host 'vault.domain'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
    InsecureRequestWarning,
  fatal: [192.168.1.200]: FAILED! =&gt; {&quot;msg&quot;: &quot;Incorrect sudo password&quot;}
  
  PLAY RECAP *******************************************************************************************************************
  192.168.1.200                : ok=1    changed=0    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0
  </code></pre>
  <p>i know that the password is correct having done a debug and the same password works when extracting from vault using curl. this is the new code were i get the error:</p>
  <pre><code>---
  - name: test hashi vault
    hosts: all
    remote_user: ec2-user
    tasks:
    - name: show bar
      systemd:
        state: restarted
        name: sssd.service
      async: 45
      become: yes
      become_method: sudo
  </code></pre>
  <p>this is what im running:</p>
  <pre><code>ansible-playbook -l 192.168.1.200 test.yml --private-key=/home/rehna/.ssh/testKeyPair.pem --vault-password-file /etc/ansible/ansible.vault -e @credentials
  </code></pre>
  <p>contents of credentials:</p>
  <pre><code>ansible_user: ec2-user
  ansible_become_pass: &quot;{{ lookup('hashi_vault', 'secret=secret/test/ec2_password auth_method=userpass username={{vault_user}} password={{vault_password}}  url={{vault_url}}:{{vault_port}} validate_certs=false') }}&quot;
  </code></pre>
  <p>hosts</p>
  <pre><code>[ec2]
  192.168.1.200
  [test_env]
  192.168.1.200 remote_user=ec2-user
  </code></pre>
  <p>from /var/log/secure:</p>
  <pre><code>unix_chkpwd[30174]: password check failed for user (ec2-user)
  sudo: pam_unix(sudo:auth): authentication failure; logname=ec2-user  uid=1000 euid=0 tty=/dev/pts/4 ruser=ec2-user rhost=  user=ec2-user
  sudo: pam_unix(sudo:auth): conversation failed
  sudo: pam_unix(sudo:auth): auth could not identify password for [ec2-user]
  </code></pre>
  <p>should be like this:</p>
  <pre><code>     sudo: ec2-user : TTY=pts/4 ; PWD=/home/ec2-user ; USER=root ; COMMAND=/bin/passwd --stdin ec2-user
       sudo: pam_unix(sudo:session): session opened for user root by ec2-user(uid=0)
       sudo: pam_unix(sudo:session): session closed for user root
  </code></pre>