I believe you can get round this by setting the following in your 
[ibdefaults] section of your krb5.conf

  default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5
  default_tkt_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5

Hope this helps,


On Monday, February 19, 2018 at 11:17:41 AM UTC, MKPhil wrote:
> When connecting from Ansible to Windows 2008 (not R2) running 
> PowerShell 3.0 I'm getting:
> hostname.domain.corp | UNREACHABLE! => {
>     "changed": false,
>     "msg": "kerberos: (('Unspecified GSS failure.  Minor code may provide 
> more information', 851968), ('KDC has no support for encryption type', 
> -1765328370)), ssl: 401 Unauthorized. basic auth failed",
>     "unreachable": true
> }
> The same playbook and account work on Windows 2012 servers on the same 
> domain.
> Any thoughts?

You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to