krb5.config
includedir /etc/krb5.conf.d/
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
dns_lookup_realm = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = XYZ.COM
default_ccache_name = KEYRING:persistent:%{uid}
[realms]
XYZ.COM = {
kdc = usern...@xyz.com
}
[domain_realm]
.xyz.com = XYZ.COM
xyz.com = XYZ.COM
_________________________________________
Inventory file:
[windows]
0.00.000.000 ansibel_ssh_user="usern...@xyz.com" ansible_connection="winrm"
__________________________________________________________
/group_vars/windows.yml
ansible_user: usern...@xyz.com
ansible_password: password
ansible_port: 5986
ansible_connection: winrm
ansible_winrm_message_encryption: always
ansible_winrm_transport: kerberos
ansible_winrm_server_cert_validation: ignore
ansible_winrm_kerberos_delegation: true
__________________________________________________________________
Playbook
-
name: ping test
hosts: windows
tasks:
-
name: ping test
ping:
thanks,
Narmada
On Mon, Nov 12, 2018 at 3:50 PM Jordan Borean <jborea...@gmail.com> wrote:
> If you've already attempted to connect but failing it would be best to
> share what you have done as well as any errors you are getting back. I can
> definitely tell you it is possible but without knowing what issues you are
> having it's hard to point you in the right direction.
>
> Some things that would be good to know are;
>
> - The inventory you are using
> - The playbook you are running with
> - The command and output when you run with -vvv so we can see the
> errors
> - If you are running with Kerberos, a copy of the /etc/krb5.conf file
> - Whether you can run 'kinit user@DOMAIN' outside of Ansible
> successfully
>
>
> Thanks
>
> Jordan
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-project+unsubscr...@googlegroups.com.
> To post to this group, send email to ansible-project@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/d8e0fc87-8eb5-4316-a280-a386b51a0522%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/d8e0fc87-8eb5-4316-a280-a386b51a0522%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/CABdF8S1DOQnFExmf0fwjccfXAh9ALy80Ri0EOO4DKHXCEk3w%2BA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
