Hi Jordan,
thank you for information.
I have done your suggestion and now it works well.
Best regards.
Flavio Gobber
On Monday, March 4, 2019 at 12:34:50 PM UTC+1, Flavio Gobber wrote:
>
>
> Hello,
>
> I am starting to use the ansible to manage server Joined to a domain.
> I have started the test using a domain user account members of Domain
> Users but with the use member of local administrators on target.
> When I execute the command:
> *ansible win_pibchs -m win_ping*
>
> and the command it's executed well.
>
> Now I would like to do the same command without take the account member of
> the local admininstrators group.
> When I try the command this terminate with this message:
> fcvwsbdt.PIBCHS.ENET | UNREACHABLE! => {
> "changed": false,
> "msg": "kerberos: Access is denied. (extended fault data:
> {u'fault_subcode': 'w:AccessDenied', u'fault_code': 's:Sender',
> u'wsmanfault_code': '5', 'transport_message': u'Bad HTTP response returned
> from server. Code 500', 'http_status_code': 500})",
> "unreachable": true
> }
>
> The group_vars of "win_pibchs" is:
>
>
>
>
>
>
> *---ansible_user: [email protected]_password:
> UnaPasswordansible_port: 5986ansible_connection:
> winrmansible_winrm_transport: kerberosansible_winrm_server_cert_validation:
> ignore*
>
> I executed this command on the target server:
> *"Set-PSSessionConfiguration -Name Microsoft.PowerShell
> -ShowSecurityDescriptorUI -Force"*
> and assigned the account *"[email protected]"*
> and execute the same thing with:
> *"Set-PSSessionConfiguration -Name Microsoft.PowerShell32
> -ShowSecurityDescriptorUI -Force"*
>
> With this configuration I am able to give the command on onother server
>
> winrs -r:fcvwsbdt.PIBCHS.ENET DIR C:\
>
> Could someone give mesome help ?.
>
> Thank you and best regards.
>
> Flavio Gobber
>
>
>
>
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/b1adbb46-26a2-40e0-b731-4c811aeca9dd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
