No, there's a setting on the Computer object where you can trust a computer for delegation.
So you have Ansible-->Server-->SQL Server. If my suspicions are right, you would have to edit "Server"'s computer object in AD and mark it with "Trust for delegation". Hopefully Matt Davis will chime in here, he's the guy who knows Ansible's WinRM implementation best. On Wednesday, February 22, 2017 at 4:53:58 PM UTC+1, Justin Dugan wrote: > > Thanks! So if I understand correctly, there is a configuration setting in > SQL Server to allow delegated connections? Any idea what this configuration > setting is? > > To further test my understanding.. Since it doesn't pop up and ask for > credentials when executing the installer from windows (RDP connection to > the server, then run the installer via powershell), isn't this also a > connection via delegated credentials? > > On Tuesday, February 21, 2017 at 4:33:10 PM UTC-5, Trond Hindenes wrote: >> >> I'm not completely sure what the delegation setting actually does - as >> far as I understand ansible it's up to your SQL Server to allow a delegated >> credential (I may be wrong here) >> >> On Monday, February 20, 2017 at 9:01:07 PM UTC+1, Justin Dugan wrote: >>> >>> I have a windows installer that fails when executed via Ansible. This >>> installer connects to a SQLServer database during the install. It fails >>> when attempting to connect to the database. >>> >>> ansible_winrm_kerberos_delegation is set and works fine when connecting >>> to file shares. Database permissions are also correct (the installer runs >>> fine when executed using powershell via RDP). Any assistance is greatly >>> appreciated. >>> >> -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7ba69822-ca93-4426-b2ae-02b359649b63%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
