krb5.config
includedir /etc/krb5.conf.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = XYZ.COM
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
XYZ.COM = {
kdc = [email protected]
}
[domain_realm]
.xyz.com = XYZ.COM
xyz.com = XYZ.COM
_________________________________________
Inventory file:
[windows]
0.00.000.000 ansibel_ssh_user="[email protected]" ansible_connection="winrm"
__________________________________________________________
/group_vars/windows.yml
ansible_user: [email protected]
ansible_password: password
ansible_port: 5986
ansible_connection: winrm
ansible_winrm_message_encryption: always
ansible_winrm_transport: kerberos
ansible_winrm_server_cert_validation: ignore
ansible_winrm_kerberos_delegation: true
__________________________________________________________________
Playbook
-
name: ping test
hosts: windows
tasks:
-
name: ping test
ping:
thanks,
Narmada
On Mon, Nov 12, 2018 at 3:50 PM Jordan Borean <[email protected]> wrote:
> If you've already attempted to connect but failing it would be best to
> share what you have done as well as any errors you are getting back. I can
> definitely tell you it is possible but without knowing what issues you are
> having it's hard to point you in the right direction.
>
> Some things that would be good to know are;
>
> - The inventory you are using
> - The playbook you are running with
> - The command and output when you run with -vvv so we can see the
> errors
> - If you are running with Kerberos, a copy of the /etc/krb5.conf file
> - Whether you can run 'kinit user@DOMAIN' outside of Ansible
> successfully
>
>
> Thanks
>
> Jordan
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/d8e0fc87-8eb5-4316-a280-a386b51a0522%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/d8e0fc87-8eb5-4316-a280-a386b51a0522%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/CABdF8S1DOQnFExmf0fwjccfXAh9ALy80Ri0EOO4DKHXCEk3w%2BA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
