Jira (BOLT-126) Support WinRM with Kerberos

[Michael Smith (JIRA)]

Title: Message Title

Michael Smith commented on BOLT-126   Re: Support WinRM with Kerberos I have a PR up using the WinRM gem's Kerberos support. It's brittle. I'm only able to get it working on Linux. Steps with Fedora 26, after setting up a Windows DC If running via Docker, use --privileged=true Install krb5-workstation Configure /etc/hosts to reach my Windows DC or join the DNS Configure /etc/krb5.conf [realms] MICHAEL.LOCAL = { kdc = windows.michael.local }   [domain_realm] .michael.local = MICHAEL.LOCAL Get a Kerberos ticket via kinit Administrator@MICHAEL.LOCAL Run bolt command run 'pwd' -n winrm://dc-server,winrm://dc-client --insecure --kerberos MICHAEL.LOCAL Even using bolt on Linux, my results were inconsistent. Out of 4 runs On one, both connect attempts timed out after 30 seconds. On the 2nd, dc-client failed with Unable to parse WinRM response: #<ArgumentError: invalid byte sequence in UTF-8> ... Last 80 unconsumed characters: </s:B�J�d/��& T�Î�l� (200). while dc-server succeeded. On the 3rd, dc-client again failed with undefined method `text' for nil:NilClass while dc-server succeeded. On the 4th, both succeeded. Add Comment   This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.