I am trying to authenticated to windows servers using "Kerberos” , but I am getting an error as “kerberos: the python kerberos library is not installed”. The basic authentication to the windows servers works well. Kerberos is installed and i cant authentication to the domain using kinit.
[ansible@NBP-HO7-Ansible01 windows]$ ansible all -i inventory -m win_ping > -vvv > ansible 2.9.4 > config file = None > configured module search path = > ['/home/ansible/.ansible/plugins/modules', > '/usr/share/ansible/plugins/modules'] > ansible python module location = > /home/ansible/.local/lib/python3.6/site-packages/ansible > executable location = /usr/local/bin/ansible > python version = 3.6.8 (default, Aug 7 2019, 17:28:10) [GCC 4.8.5 > 20150623 (Red Hat 4.8.5-39)] > No config file found; using defaults > host_list declined parsing /home/ansible/ansible/windows/inventory as it > did not pass its verify_file() method > script declined parsing /home/ansible/ansible/windows/inventory as it did > not pass its verify_file() method > auto declined parsing /home/ansible/ansible/windows/inventory as it did > not pass its verify_file() method > Parsed /home/ansible/ansible/windows/inventory inventory source with ini > plugin > META: ran handlers > Using module file > /home/ansible/.local/lib/python3.6/site-packages/ansible/modules/windows/win_ping.ps1 > Pipelining is enabled. > <10.9.1.5> ESTABLISH WINRM CONNECTION FOR USER: [email protected] on PORT > 5986 TO 10.9.1.5 > 10.9.1.5 | UNREACHABLE! => { > "changed": false, > "msg": "kerberos: the python kerberos library is not installed", > "unreachable": true > } [ansible@NBP-HO7-Ansible01 windows]$ [ansible@NBP-HO7-Ansible01 windows]$ ^C > [ansible@NBP-HO7-Ansible01 windows]$ klist > Ticket cache: KEYRING:persistent:1000:1000 > Default principal: [email protected] > > Valid starting Expires Service principal > 01/27/2020 14:04:59 01/28/2020 00:04:59 krbtgt/[email protected] > renew until 02/03/2020 14:04:50 [ansible@NBP-HO7-Ansible01 windows]$ ^C [ansible@NBP-HO7-Ansible01 windows]$ cat group_vars/windows.yml ansible_user: [email protected] ansible_password: xxxxxxx #ansible_port: 5986 ansible_connection: winrm ansible_winrm_server_cert_validation: ignore ansible_winrm_transport: kerberos [ansible@NBP-HO7-Ansible01 windows]$ Required packages are installed as you can below from pip freeze output > ansible@NBP-HO7-Ansible01 windows]$ pip freeze > backports.ssl-match-hostname==3.5.0.1 > certifi==2019.11.28 > cffi==1.13.2 > chardet==3.0.4 > configobj==4.7.2 > cryptography==2.8 > decorator==3.4.0 > enum34==1.1.6 > futures==3.1.1 > idna==2.8 > iniparse==0.4 > ipaddress==1.0.16 > kerberos==1.3.0 > kitchen==1.1.1 > langtable==0.0.31 > ntlm-auth==1.4.0 > pan-python==0.16.0 > pandevice==0.14.0 > perf==0.1 > pycparser==2.19 > pycurl==7.19.0 > pygobject==3.22.0 > pygpgme==0.3 > pykerberos==1.2.1 > pyliblzma==0.5.3 > python-augeas==0.5.0 > python-linux-procfs==0.4.9 > pyudev==0.15 > pywinrm==0.4.1 > pyxattr==0.5.1 > PyYAML==3.10 > requests==2.22.0 > requests-kerberos==0.12.0 > requests-ntlm==1.1.0 > schedutils==0.4 > six==1.9.0 > slip==0.4.0 > slip.dbus==0.4.0 > urlgrabber==3.10 > urllib3==1.25.8 > xmltodict==0.12.0 > yum-langpacks==0.4.2 > yum-metadata-parser==1.1.4 > You are using pip version 8.1.2, however version 20.0.1 is available. > You should consider upgrading via the 'pip install --upgrade pip' command Have got both python 2.7 and 3.6 installed on the machine and 3.6 is default version ansible is being used, whereas the python 2.7 is used as default version on the machine requests-kerberos and pykerberos are installed only pip and pip3. Any pointers on what can be done here? > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/1700e8a9-8342-441d-8eca-4a8a38f4cfee%40googlegroups.com.
