Valentin Aitken created BROOKLYN-308:
----------------------------------------
Summary: Windows: Invoke-Command is not working after Active
Directory is installed
Key: BROOKLYN-308
URL: https://issues.apache.org/jira/browse/BROOKLYN-308
Project: Brooklyn
Issue Type: Bug
Reporter: Valentin Aitken
Priority: Minor
When Active Directory is installed and
https://github.com/apache/brooklyn-server/blob/master/software/base/src/main/resources/org/apache/brooklyn/software/base/custom-enable-credssp.ps1
is triggered on a Windows machine, the following script returns an error:
{noformat}
$pass = 'mypassword'
$secpasswd = ConvertTo-SecureString $pass -AsPlainText -Force
$mycreds = New-Object System.Management.Automation.PSCredential
($($env:COMPUTERNAME + "\Administrator"), $secpasswd)
$exitCode = Invoke-Command -Credential $mycreds -ComputerName
$env:COMPUTERNAME -ScriptBlock {
$process = Start-Process "echo" -ArgumentList "Hi" -Wait -PassThru
-NoNewWindow
$process.ExitCode
} -Authentication CredSSP
{noformat}
I receive
{noformat}
The WinRM client cannot process the request. A computer policy does not allow
the delegation of the user credentials to the target computer.
FullyQualifiedErrorId : -2144108125
{noformat}
I guess user configuration has to be tweaked like it is written in
https://social.technet.microsoft.com/Forums/en-US/b7bcea69-628b-4deb-8a1d-b080a652e16f/powershell-invokecommand-admodule?forum=winserverpowershell#b94a38ad-f743-4cbe-859a-1f0bd1689c56
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
