Hi Piyush, Please find below snippet from ansible command for further understanding,
############################################################################################################### creating Kerberos CC at /tmp/tmpEO9VQo calling kinit with subprocess for principal [email protected] kinit succeeded for principal [email protected] <GCP-Bast.northind.internal> WINRM CONNECT: transport=kerberos endpoint=https://GCP-Bast.northhind.internal:5986/wsman <GCP-Bast.northind.internal> WINRM CONNECTION ERROR: authGSSClientStep() failed: (('Unspecified GSS failure. Minor code may provide more information', 8519 68), ('Server not found in Kerberos database', -1765328377)) #################################################################################################################### Please share your thoughts. Thanks, Amal On Tuesday, July 30, 2019 at 9:24:03 PM UTC+5:30, Sushena Parthasarathy wrote: > > Hi Team, > we`re using Ansible v 2.7, below python modules for > kerberos. We have switched from basic to kerberos auth all playbooks are > failing with below error > > *Python (Kerberos) modules:* > kerberos 1.3.0 > requests-kerberos 0.12.0 > > *Ansible host file:* > ansible_user= [email protected] > ansible_password= '2*S<5q$Vn#]M' > ansible_connection= winrm > ansible_winrm_transport= kerberos > #ansible_winrm_realm= NORTHIND.INTERNAL > ansible_winrm_scheme= http > ansible_winrm_server_cert_validation= ignore > ansible_port= 5985 > ansible_winrm_kerberos_delegation= yes > > kinit command succeeds and able to do klist as well. But when we execute > win_ping module to the Windows(2012) node which is part of domain > (NORTHIND.INTERNAL), failing with below error. Can anyone assists to fix > this below error? > > *Command:* *ansible -i /home/ansible/hosts win -m win_ping > -e="ansible_ssh_port=5985, ansible_connection=winrm"* > > > *Error:* > > *gcp-bashost.NORTHIND.INTERNAL | UNREACHABLE! => {* > * "changed": false,* > * "msg": "kerberos: authGSSClientStep() failed: (('Unspecified GSS > failure. Minor code may provide more information', 851968), ('Server not > found in Kerberos database', -1765328377))",* > * "unreachable": true* > *}* > > > > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/25fad75e-0859-47a6-a670-8cf7852cd8fb%40googlegroups.com.
