Discussion:
[ansible-project] Kerberos Unknown credential cache type
Guillaume Querso
2015-07-17 14:59:41 UTC
Permalink
hi,
apparently, we need to use python 2.7.6 (the newest) for kerberos to work,
otherwise ansible doesn't try kerberos properly (you should have
transport=kerberos in the verbose).

my problem is the following:
i try to ping my windows server but i have this message:

GSSError: ((\'Unspecified GSS failure. Minor code may provide more
information\', 851968), (\'Unknown credential cache type\',
-1765328244))\n', 'stdout': ''}

i have:
windows server 2008 R2 with powershell 4
ansible 2.0.0 or ansible stable 1.9 (same message on both verisons)
a valide ticket for the domain user

thank you for your help!
--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+***@googlegroups.com.
To post to this group, send email to ansible-***@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/468473d2-83ce-44fc-84f7-f092601753db%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
J Hawkesworth
2015-07-17 17:33:28 UTC
Permalink
Can you share your /etc/krb5.conf?

Is it possible you have KRB5CCNAME environment variable set specifying a
non standard location for the kerberos credential cache? I think that
would probably cause problems?

Not sure if pykerberos expects a particular type of credential cache but
fairly certain it works with a FILE type cache.

Hope this helps,

Jon
Post by Guillaume Querso
hi,
apparently, we need to use python 2.7.6 (the newest) for kerberos to work,
otherwise ansible doesn't try kerberos properly (you should have
transport=kerberos in the verbose).
GSSError: ((\'Unspecified GSS failure. Minor code may provide more
information\', 851968), (\'Unknown credential cache type\',
-1765328244))\n', 'stdout': ''}
windows server 2008 R2 with powershell 4
ansible 2.0.0 or ansible stable 1.9 (same message on both verisons)
a valide ticket for the domain user
thank you for your help!
--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-project+***@googlegroups.com.
To post to this group, send email to ansible-***@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/35b1c492-7128-4d62-885f-f8a2cf69a61a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Loading...