Can anyone guide me why am getting this error ?
UNREACHABLE! => {
"changed": false,
"msg": "Kerberos auth failure: kinit: Cannot contact any KDC for realm
'AD.DOMAIN.COM' while getting initial credentials",
"unreachable": true
}
My inventory and krb5.conf files looks like this
Hosts:
[win]
pc1.ad.domain.com
#10.217.25.246
[win:vars]
ansible_user=u...@ad.domain.com
ansible_password=Welcome$123
ansible_connection= winrm
ansible_winrm_transport= kerberos
ansible_winrm_server_cert_validation=ignore
/etc/krb5.conf.d/ :
# Configuration snippets may be placed in this directory as well
includedir /etc/krb5.conf.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
dns_lookup_kdc = true
pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt
default_realm = AD.DOMAIN.COM
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
AD.DOMAIN.COM = {
kdc = pc1.ad.domain.com
default_server = ad.infosys.com
}
[domain_realm]
.ad.domain.com = AD.DOMAIN.COM
ad.domain.com = AD.DOMAIN.COM
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/37f931f8-8d52-4a74-a022-4c8e9238e7fa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
