Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Ethan Brown commented on BOLT-126 Re: Support WinRM with Kerberos (from Linux node) We removed –realm switch in the PR in favor of using realm in the winrm definition. It's possible that we'll make it so that –user u...@domain.com will imply use of Kerberos. Windows should probably implicitly use the Kerberos ticket affiliated with the current logged on domain user ... making specification of realm unnecessary on Windows. It's also possible that realm will be changed to domain - that's still an open discussion. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.31947.1564094940237%40Atlassian.JIRA.
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Chris Cowell updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos (from Linux node) Change By: Chris Cowell Labels: DOCS docs docs_reviewed windows Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.31868.1564090860512%40Atlassian.JIRA.
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Lucy Wyman updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos (from Linux node) Change By: Lucy Wyman Fix Version/s: BOLT Next Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.26060.1563833701130%40Atlassian.JIRA.
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Lucy Wyman updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos (from Linux node) Change By: Lucy Wyman Labels: docs windows Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.26069.1563833701177%40Atlassian.JIRA.
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Lucy Wyman updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos (from Linux node) Change By: Lucy Wyman Labels: DOCS docs windows Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.26078.1563833701342%40Atlassian.JIRA.
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Lucy Wyman assigned an issue to Lucy Wyman Puppet Task Runner / BOLT-126 Support WinRM with Kerberos (from Linux node) Change By: Lucy Wyman Assignee: Ethan Brown Lucy Wyman Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.23833.1563573960301%40Atlassian.JIRA.
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Ethan Brown commented on BOLT-126 Re: Support WinRM with Kerberos (from Linux node) BOLT-1472 has been created to cover the testing aspect of this ticket, so that we can move forward on merging the basics of this work with manual testing only. As mentioned in https://github.com/puppetlabs/bolt/pull/1087 the caveats are: Works only with MIT Kerberos from a Linux node Does not work with Heimdal on OSX - gssapi gem support for Heimdal is not well vetted - OSX doesn't export Kerberos IOV functions needed for MS DCE RPC Does not work from a Windows node as winrm / gssapi gems only support MIT Kerberos, and Windows has its own APIs Has been manually tested in a simple AD environment that has a CentOS host domain joined to Windows Active Directory Provides initial support for the --realm command line switch, which can be used intead of --username / --password. Note that Kerberos is an authentication method, not a transport, so can be used with or without SSL just like other authentication. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Ethan Brown commented on BOLT-126 Re: Support WinRM with Kerberos (from Linux node) The WinRM gem has been updated. However, it was determined that this only supports the needs of non-Windows clients -> Windows using Kerberos. Windows client-side support is a separate task and I've filed BOLT-1323 for that. Currently working on getting testing up for this PR by bringing up a few additional nodes in our docker compose tests: A KDC based on Alpine Linux to authenticate against The Microsoft OMI server, with PowerShell and the PSRP plugin installed to allow for running Powershell remotely over WinRM (or SSH) There are still two wildcards in the mix here: The instructions on OMI server only specify how to authenticate against an Active Directory Domain Controller, not a KDC server (https://github.com/Microsoft/omi/blob/master/Unix/doc/setup-kerberos-omi.md) We know there are still some incompatibilities running PowerShell commands over WinRM to a Linux host (based on the webinar I did demonstrating this behavior). Being able to run Write-Host hi should be sufficient to test the Kerberos auth however. We don't yet support PowerShell over SSH transport, but this testing setup will make it easier to add support for that later Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)
Jira (BOLT-126) Support WinRM with Kerberos (from Linux node)
Title: Message Title Ethan Brown updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos (from Linux node) Change By: Ethan Brown Summary: Support WinRM with Kerberos (from Linux node) Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.214093.150696560.12224.1558370340842%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Ethan Brown commented on BOLT-126 Re: Support WinRM with Kerberos Blocking this on the merge of the PR that I put up for the WinRM gem at https://github.com/WinRb/WinRM/pull/302 to fix the Kerberos corruption. We'll want a new gem to be cut prior to integrating Kerberos support into Bolt. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Ethan Brown updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Ethan Brown Sprint: Bolt Kanban Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Sean Millichamp commented on BOLT-126 Re: Support WinRM with Kerberos Sorry forgot to include the link, the new PR is here: https://github.com/puppetlabs/bolt/pull/950 Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Sean Millichamp commented on BOLT-126 Re: Support WinRM with Kerberos I put up a new PR based on Michael Smith's PR from January 2018 adjusted for the latest Bolt. It allows me to use a locally obtained Kerberos ticket on Linux to connect via WinRM with Kerberos to a target Windows system. I can confirm the inconsistent run results Michael Smith reported, I did a few sets of 100 runs and got approximately 10% failure. I understand the desire to not want to merge this when the behavior isn't consistent, but 10% failure is better than 100% failure. Also, I spent a while looking at this today and I believe it to be likely some error with the Kerberos decryption in WinRM. It seems to be similar to or the same as the issue here: https://github.com/WinRb/WinRM/issues/161 Open question: are we trying to enable transparent login from Windows nodes in a domain to other Windows nodes in that domain, or users getting a Kerberos ticket and using it to login to Windows domain nodes from heterogeneous sources? Those are going to be completely separate to implement. Our use case is we have a large number of completely disconnected domains with systems we need to WinRM into. Each domain has its own security policy and some of them only allow WinRM using Kerberos. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Yasmin Rajabi assigned an issue to Unassigned Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Yasmin Rajabi Assignee: Yasmin Rajabi Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Yasmin Rajabi updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Yasmin Rajabi Labels: windows Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Yasmin Rajabi assigned an issue to Ethan Brown Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Yasmin Rajabi Assignee: Ethan Brown Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Michael Smith Component/s: Kerberos Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith commented on BOLT-126 Re: Support WinRM with Kerberos Josh Cooper I don't think it impacts usability. You can pass in empty strings for those, and as long as you have a Kerberos ticket locally (for libgssapi) it works. I managed to get it working on Linux. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Josh Cooper commented on BOLT-126 Re: Support WinRM with Kerberos Looks like WinRM gem has some issues with single signon: https://github.com/WinRb/WinRM/issues/270 Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith assigned an issue to Yasmin Rajabi Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Michael Smith Assignee: Michael Smith Yasmin Rajabi Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Michael Smith Bolt should have an option to use Kerberos with WinRM, such as would be found in an Active Directory domain. This enables the user to connect to remote systems without needing to specify a password (single sign-on). While there are different Kerberos implementations, I think we should focus on a simple Active Directory domain and single forest. Open question: are we trying to enable transparent login from Windows nodes in a domain to other Windows nodes in that domain, or users getting a Kerberos ticket and using it to login to Windows domain nodes from heterogeneous sources? Those are going to be completely separate to implement. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title David Kramer updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: David Kramer Sprint: Bolt Adoption Blockers Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Michael Smith Sprint: Bolt Kanban Adoption Blockers Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith commented on BOLT-126 Re: Support WinRM with Kerberos Going to put this on hold for a bit while we figure out what would actually help people. The current PR is unreliable and a pain to setup, so it would require significantly more effort than originally estimated. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith commented on BOLT-126 Re: Support WinRM with Kerberos Also, my review of the ecosystem is that almost everything relies on the MIT Kerberos libgssapi implementation. Trying to use it on macOS appears to fail because the Ruby gssapi library doesn't work with the Heimdal Kerberos implementation. Trying to get it working on Windows runs into issues, the only report I've seen where it does work is when using 32-bit Ruby and MIT Kerberos (from https://kerberos.org). Nothing I've seen except Powershell itself seems to let you use Windows' built-in domain administration to do a no-setup password-less connection to another server in the domain. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title
Michael Smith commented on BOLT-126
Re: Support WinRM with Kerberos
I have a PR up using the WinRM gem's Kerberos support. It's brittle. I'm only able to get it working on Linux. Steps with Fedora 26, after setting up a Windows DC
If running via Docker, use --privileged=true
Install krb5-workstation
Configure /etc/hosts to reach my Windows DC or join the DNS
Configure /etc/krb5.conf
[realms]
MICHAEL.LOCAL = {
kdc = windows.michael.local
}
[domain_realm]
.michael.local = MICHAEL.LOCAL
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith commented on BOLT-126 Re: Support WinRM with Kerberos Also helpful, some quick notes for using winrm/winrs: https://muktaaa.wordpress.com/2014/08/07/kerberos-authentication/ Thanks Glenn Sarti, that doc walking through configuring a DNS Server and Domain Controller and joining a client to it was very helpful. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Glenn Sarti commented on BOLT-126 Re: Support WinRM with Kerberos Sounds more acceptance-y (ala Beaker) Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Ethan Brown commented on BOLT-126 Re: Support WinRM with Kerberos If only AppVeyor could run Linux docker containers! https://github.com/criteo/kerberos-docker Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Ethan Brown commented on BOLT-126 Re: Support WinRM with Kerberos I think that you can also setup the MIT Kerberos server on a standalone Windows machine without setting up a DC, though I'm not sure of the specifics. Download: http://web.mit.edu/kerberos/krb5-1.16/krb5-1.16.html Docs: http://web.mit.edu/kerberos/krb5-1.16/doc/admin/index.html Not sure if that's any more or less painful for an automated testing scenario (not sure how a DC would work in AppVeyor for instance). I wonder if it's worth just punting on the actual Kerberos testing and assuming that the winrm gem is well-tested enough? Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Glenn Sarti commented on BOLT-126 Re: Support WinRM with Kerberos Josh Cooper If you want to set something up temporarily in Pooler I wrote up docs https://docs.google.com/document/d/19Vo4VaRfx7rSA5WIPbYS8cvRahW9LF6kJx6cR7uzQ6w/edit?usp=sharing I also had a module I used to create a DC for PupConf 2016 https://github.com/glennsarti/glennsarti-windows_ad You'd probably want to test performing actions against a Domain Member and a Domain Controller to see if there's any difference in behaviour. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith commented on BOLT-126 Re: Support WinRM with Kerberos My plans so far: https://blogs.technet.microsoft.com/uktechnet/2016/06/08/setting-up-active-directory-via-powershell/ Kerberos setup automatically? (magic...) Profit! Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Josh Cooper commented on BOLT-126 Re: Support WinRM with Kerberos Glenn Sarti thoughts? Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith assigned an issue to Michael Smith Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Michael Smith Assignee: Michael Smith Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Michael Smith commented on BOLT-126 Re: Support WinRM with Kerberos Josh Cooper do you have a suggestion where to start setting up a test environment for this? Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Alex Dreyer updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Alex Dreyer Sprint: Bolt Adoption Blockers Kanban Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title David Kramer updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: David Kramer Sprint: Bolt One Point Oh Adoption Blockers Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (BOLT-126) Support WinRM with Kerberos
Title: Message Title Yasmin Rajabi updated an issue Puppet Task Runner / BOLT-126 Support WinRM with Kerberos Change By: Yasmin Rajabi Sprint: Bolt One Point Oh Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
