I have setup my Ansible Tower and Windows Kerberos / Active Directory authentication as specified here <http://hindenes.com/trondsworking/2015/07/27/ansible-and-windows-configuring-kerberosactive-directory-authentication/>. It is the same procedure explained in the official documentation too. For information here is what I did -
1. Installed the suggested Kerberos packages in the Ubuntu server 2. Edited the configuration files as suggested I could verify that my configuration is working fine by running the kinit command as suggested - kinit -C [email protected] The klist command run after that showed the expected information klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: [email protected] Valid starting Expires Service principal 2016-05-03T10:59:04 2016-05-03T20:59:04 krbtgt/[email protected] renew until 2016-05-04T10:58:59 My Ansible Tower inventory contains just one VM, where under the variables in host properties, I have specified the following details - ansible_connection: winrm ansible_port: "5986" ansible_ssh_user: [email protected] I suppose the password is not necessary since the ticket is obtained through the kinit command. I have tried adding the password above by specifying *ansible_ssh_pass* but that didn't help. Now when I run the 'Job Template' it fails instantly with this message. TASK [setup] ******************************************************************* fatal: [VM-NAME]: FAILED! => {"failed": true, "msg": "kerberos: (('Unspecified GSS failure. Minor code may provide more information', 851968), ('No Kerberos credentials available', -1765328243)), plaintext: 401 Unauthorized."} How can I resolve this issue? -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/11a7338f-3b97-4ccc-a83e-f2676bc78562%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
