Control Node: - CentOS 7 - Ansible 2.1 - pywinrm version from May 19th, 2016
Remote Node: - Windows 7 - Powershell 3 I'm able to connect to my Windows remote node just fine with the powershell setting *winrm/config/server/AllowUnencrypted=true*. But when I change it to false I get the error below. I'm trying to use Kerberos. What am I doing wrong or how should I diagnose the problem? *$ ansible windows -m win_ping -vvvvvNo config file found; using defaultsLoaded callback minimal of type stdout, v2.0<ADS-6999> ESTABLISH WINRM CONNECTION FOR USER: ansibleAdmin on PORT 5986 TO ADS-6999<ADS-6999> WINRM CONNECT: transport=kerberos endpoint=https://ADS-6999:5986/wsman <https://urldefense.proofpoint.com/v2/url?u=https-3A__ADS-2D6999-3A5986_wsman&d=CwMFaQ&c=IGDlg0lD0b-nebmJJ0Kp8A&r=ATO-uJXWOBdlXfHiWeQfW-8RNV-1NXeUTYIEq2ZNDg4&m=-onXPFRqIMDCtRo7_m9XkC3nOC4xIpQkQWKM0l4jPUo&s=kO_2d9w5rZF-SAxmt_YAoID0cJqOODW4tgpQtGfOpoc&e=><ADS-6999> WINRM CONNECTION ERROR: (('Unspecified GSS failure. Minor code may provide more information', 851968), ('No Kerberos credentials available', -1765328243))Traceback (most recent call last): File "/etc/ansible/lib/ansible/plugins/connection/winrm.py", line 134, in _winrm_connect protocol.send_message('') File "/usr/lib/python2.7/site-packages/winrm/protocol.py", line 193, in send_message return self.transport.send_message(message) File "/usr/lib/python2.7/site-packages/winrm/transport.py", line 269, in send_message krb_ticket = KerberosTicket(self.krb_service) File "/usr/lib/python2.7/site-packages/winrm/transport.py", line 205, in __init__ kerberos.authGSSClientStep(krb_context, '')GSSError: (('Unspecified GSS failure. Minor code may provide more information', 851968), ('No Kerberos credentials available', -1765328243))ADS-6999 | FAILED! => { "failed": true, "msg": "kerberos: (('Unspecified GSS failure. Minor code may provide more information', 851968), ('No Kerberos credentials available', -1765328243))"}* here is my file from the group_vars direcctory $ cat windows.yml --- ansible_user: ansibleAdmin ansible_password: ******** ansible_port: 5986 ansible_connection: winrm ansible_winrm_transport: kerberos ansible_winrm_kerberos_delegation: yes -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7dff63eb-2220-420d-990c-3b1dc9e9bafa%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
