I would expect his logs to show ssh trying to do kerberos auth and
then failing back to whatever. The fact it is going straight to plain
auth is odd.
Maybe play around with ansible_ssh_common_args or ansible.cfg to get
ssh more verbose?
On Fri, Apr 8, 2016 at 1:51 PM, Zacharias Thompson <zarl...@gmail.com> wrote:
> Are you running the kinit under the same user you're running ansible as?
>
> What version of Ansible are you running?
>
> On Fri, Apr 8, 2016 at 4:27 AM, Mark Matthews <mdmatth...@gmail.com> wrote:
>>
>> Hi Zacharias
>>
>> I have setup a kerberos ticket and all seems to be working fine. I am able
>> to do a "knit username" and create a ticket.
>>
>> I then add the following entry into /etc/ansible/hosts file
>> [win]
>> servername.COMPANY.COM
>>
>> I have create the following /etc/ansible/group_vars/win.yml file with the
>> following information
>>
>> ansible_ssh_user: usern...@company.com
>> ansible_ssh_port: 5986
>> ansible_connection: winrm
>>
>>
>> Bu when I try run a playbook to the server in 'win' I get the following
>> error:
>>
>> fatal: [uk-ansible-test02.WINTECH.LOCAL]: FAILED! => {"failed": true,
>> "msg": "ssl: 401 Unauthorized. basic auth failed"}
>>
>>
>> Any ideas as too what could be causing this?
>>
>> Cheers
>> Mark
>>
>>
>> On Thursday, April 7, 2016 at 1:27:23 PM UTC+1, Mark Matthews wrote:
>>>
>>> Hi
>>>
>>>
>>>
>>> Currently I have been connecting to servers to using local server
>>> accounts, and therefore my ‘group_vars/winservers.yml’ file has looked like
>>> the following:
>>>
>>>
>>>
>>> ansible_ssh_user: Administrator
>>>
>>> ansible_ssh_pass: PASSWORD
>>>
>>> ansible_ssh_port: 5986
>>>
>>> ansible_connection: winrm
>>>
>>>
>>>
>>> But now I need to authenticate to servers that are connected on the
>>> domain. How would I change this file? Is it as simple as…
>>>
>>>
>>>
>>> ansible_ssh_user: my.domain\mark.matthews
>>>
>>> ansible_ssh_pass: PASSWORD
>>>
>>> ansible_ssh_port: 5986
>>>
>>> ansible_connection: winrm
>>>
>>>
>>>
>>>
>>>
>>> Cheers
>>
>> --
>> You received this message because you are subscribed to a topic in the
>> Google Groups "Ansible Project" group.
>> To unsubscribe from this topic, visit
>> https://groups.google.com/d/topic/ansible-project/sajcZOtW2uo/unsubscribe.
>> To unsubscribe from this group and all its topics, send an email to
>> ansible-project+unsubscr...@googlegroups.com.
>> To post to this group, send email to ansible-project@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ansible-project/0b133188-5ba5-4930-acfe-4b223faefb1c%40googlegroups.com.
>>
>> For more options, visit https://groups.google.com/d/optout.
>
>
>
>
> --
> Zacharias Thompson
> zarl...@gmail.com
> 253.569.7502
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/CAA%3DyVUYscms%3DTCuPaubG0i4CyU13cTknhzfStGRMR2X3k0J6Yw%40mail.gmail.com.
>
> For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/CAHEKYV67xwpweZMO8p1anFc2cQLjkt5rHoeHwVcBe7dUp84FpQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
