Can you test regular psremoting from another windows host to the problematic machine using the same port (5985) and the same auth scheme (Kerberos) that you are (seemlingly) using in your Ansible config?
On Wednesday, November 11, 2015 at 10:47:20 PM UTC+1, Matt Calhoun wrote: > > I have many windows hosts that have been configured identically (as far as > I can tell) and I can connect to all but one of them. Anyone have an idea > of why this may be happening? > > - Up to date on all windows patches > - Have rebooted > > $ ansible myhost -m win_ping -o -vvvv > > > Using /Users/[redacted]/Dropbox/Code/[redacted]/[redacted]/ansible.cfg as > config file > Loaded callback oneline of type stdout, v2.0 > <myhost> ESTABLISH WINRM CONNECTION FOR USER: [redacted]@MYDOMAIN.LOCAL on > PORT 5985 TO myhost > <myhost> EXEC Set-StrictMode -Version Latest > (New-Item -Type Directory -Path $env:temp -Name > "ansible-tmp-1447277903.29-206977271531324").FullName | Write-Host > -Separator ''; > myhost | UNREACHABLE! > > $ telnet myhost 5985 > Trying 10.159.15.11... > Connected to myhost.mydomain.local. > Escape character is '^]'. > > C:\Windows\system32>hostname > myhost > > C:\Windows\system32>winrm get winrm/config/service > Service > RootSDDL = > O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD) > MaxConcurrentOperations = 4294967295 > MaxConcurrentOperationsPerUser = 1500 > EnumerationTimeoutms = 240000 > MaxConnections = 300 > MaxPacketRetrievalTimeSeconds = 120 > AllowUnencrypted = true [Source="GPO"] > Auth > Basic = true [Source="GPO"] > Kerberos = true > Negotiate = true > Certificate = false > CredSSP = false > CbtHardeningLevel = Relaxed > DefaultPorts > HTTP = 5985 > HTTPS = 5986 > IPv4Filter = * [Source="GPO"] > IPv6Filter = * [Source="GPO"] > EnableCompatibilityHttpListener = false > EnableCompatibilityHttpsListener = false > CertificateThumbprint > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/87f1f026-d754-49b4-b7dc-b35034724bc1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
