Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)

[Ethan Brown (JIRA)]

Title: Message Title

Ethan Brown commented on BOLT-126   Re: Support WinRM with Kerberos (from Linux node) The WinRM gem has been updated. However, it was determined that this only supports the needs of non-Windows clients -> Windows using Kerberos. Windows client-side support is a separate task and I've filed BOLT-1323 for that. Currently working on getting testing up for this PR by bringing up a few additional nodes in our docker compose tests: A KDC based on Alpine Linux to authenticate against The Microsoft OMI server, with PowerShell and the PSRP plugin installed to allow for running Powershell remotely over WinRM (or SSH) There are still two wildcards in the mix here: The instructions on OMI server only specify how to authenticate against an Active Directory Domain Controller, not a KDC server (https://github.com/Microsoft/omi/blob/master/Unix/doc/setup-kerberos-omi.md) We know there are still some incompatibilities running PowerShell commands over WinRM to a Linux host (based on the webinar I did demonstrating this behavior). Being able to run Write-Host hi should be sufficient to test the Kerberos auth however. We don't yet support PowerShell over SSH transport, but this testing setup will make it easier to add support for that later Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.1506965600000.12384.1558372621045%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.