Hello,
I am starting to use the ansible to manage server Joined to a domain.
I have started the test using a domain user account members of Domain Users
but with the use member of local administrators on target.
When I execute the command:
*ansible win_pibchs -m win_ping*
and the command it's executed well.
Now I would like to do the same command without take the account member of
the local admininstrators group.
When I try the command this terminate with this message:
fcvwsbdt.PIBCHS.ENET | UNREACHABLE! => {
"changed": false,
"msg": "kerberos: Access is denied. (extended fault data:
{u'fault_subcode': 'w:AccessDenied', u'fault_code': 's:Sender',
u'wsmanfault_code': '5', 'transport_message': u'Bad HTTP response returned
from server. Code 500', 'http_status_code': 500})",
"unreachable": true
}
The group_vars of "win_pibchs" is:
*---ansible_user: [email protected]_password:
UnaPasswordansible_port: 5986ansible_connection:
winrmansible_winrm_transport: kerberosansible_winrm_server_cert_validation:
ignore*
I executed this command on the target server:
*"Set-PSSessionConfiguration -Name Microsoft.PowerShell
-ShowSecurityDescriptorUI -Force"*
and assigned the account *"[email protected]"*
and execute the same thing with:
*"Set-PSSessionConfiguration -Name Microsoft.PowerShell32
-ShowSecurityDescriptorUI -Force"*
With this configuration I am able to give the command on onother server
winrs -r:fcvwsbdt.PIBCHS.ENET DIR C:\
Could someone give mesome help ?.
Thank you and best regards.
Flavio Gobber
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/0068a622-e857-4fc1-ae3d-8eb3ff26d268%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
