I think you probably just need to acquire a kerberos ticket. Unless you have things set up so that you can log in to your ansible controller as a user on your domain, you won't have a kerberos ticket (which is what lets you access the machines on your domain as a specific user).
I suggest you attempt to test that you can acquire a kerberos ticket as described here: http://docs.ansible.com/ansible/intro_windows.html#testing-a-kerberos-connection If you have further problems, try the troubleshooting tips here: http://docs.ansible.com/ansible/intro_windows.html#troubleshooting-kerberos-connections Jon On Monday, October 12, 2015 at 9:15:50 AM UTC+1, Jugal Porwal wrote: > > Hi, > > I want to access my windows machine using the domain account. I installed > kerberos on my control node (centos) . And configured the krb5.conf as > follows : > > > [realms] > MYDOMAIN.COM <http://etbdenevr.com/> = { > kdc = my-domain-controller.com <http://iota-1-pdc.etbdenver.com/> > } > > [domain_realm] > .mydomain.com <http://etbdenver.com/> = MYDOMAIN.COM > <http://etbdenver.com/> > > <http://etbdenver.com/>In my windows.yml file i have the following > details : > > ansible_ssh_user: '[email protected] <javascript:>' > ansible_ssh_pass: 'mypassword' > ansible_ssh_port: '5986' > ansible_connection: 'winrm' > > When i run the command kinit [email protected] <javascript:> it > prompts for the password but does nothing after i enter it. It just accepts > it and moves on. > When i tried to ping my windows machine it returns the following error > > Loaded callback minimal of type stdout, v2.0 > <windowsip> ESTABLISH WINRM CONNECTION FOR USER: [email protected] > <javascript:> on PORT 5986 TO windowsip > windowsip | FAILED! => { > "failed": true, > "msg": "ERROR! plaintext: 401 Unauthorized. basic auth failed" > } > > What is the issue here? Is there some more configuration that i need to > do ? Like a certificate or sumthing on the windows machine? > > Regards > Jugal Porwal > > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/59545f19-1022-4bce-aabc-9c09a93f89ad%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
