# Hello All

**URL:** <https://forum.ansible.com/t/hello-all/38032>\
**Category:** Ansible Project\
**Created:** [May 26, 2023, 1:38pm UTC](https://forum.ansible.com/t/hello-all/38032 "2023-05-26T13:38:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![malek\_sakir](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@malek\_sakir](https://forum.ansible.com/u/malek_sakir)\
**Post date:** [May 26, 2023, 1:38pm UTC](https://forum.ansible.com/t/hello-all/38032/1 "2023-05-26T13:38:59Z")

</div>

Anyone have proper documents for Kerberos-based Authentication for ansible then please help me .

Thank You  
Malek Sakir.

---

<div class="post-metadata">

**Author:** ![Walter\_Rowe](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/walter_rowe/32/4506_2.png) [@Walter\_Rowe](https://forum.ansible.com/u/Walter_Rowe)\
**Post date:** [May 26, 2023, 1:42pm UTC](https://forum.ansible.com/t/hello-all/38032/2 "2023-05-26T13:42:54Z")

</div>

The ansible documentation covers this well.

Walter

---

<div class="post-metadata">

**Author:** ![Narmada\_Karthika](https://avatars.discourse-cdn.com/v4/letter/n/b5e925/32.png) [@Narmada\_Karthika](https://forum.ansible.com/u/Narmada_Karthika)\
**Post date:** [May 26, 2023, 2:19pm UTC](https://forum.ansible.com/t/hello-all/38032/3 "2023-05-26T14:19:36Z")

</div>

hey, this is what I go worked for my env

this is the krb5.conf

# Configuration snippets may be placed in this directory as well

includedir /etc/krb5.conf.d/

[logging]  
default = FILE:/var/log/krb5libs.log  
kdc = FILE:/var/log/krb5kdc.log  
admin\_server = FILE:/var/log/kadmind.log

[libdefaults]  
dns\_lookup\_realm = false  
ticket\_lifetime = 24h  
renew\_lifetime = 7d  
forwardable = true  
rdns = false  
pkinit\_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt  
default\_realm = [DOMAIN.COM](http://DOMAIN.COM)(your company domain)  
default\_ccache\_name = KEYRING:persistent:%{uid}

[realms]

# kdc = [kerberos.example.com](http://kerberos.example.com)

[DOMAIN.COM](http://DOMAIN.COM) = {  
kdc =   
default\_domain = [DOMAIN.COM](http://DOMAIN.COM)  
admin\_server =   
}

[domain\_realm]  
.domain.com = [DOMAIN.COM](http://DOMAIN.COM)  
[domain.com](http://domain.com) = [DOMAIN.COM](http://DOMAIN.COM)

Just replace domain name to your domain name.

win vars:  
[win:vars]  
[ansible\_user=username@DOMAIN.COM](mailto:ansible_user=username@DOMAIN.COM)  
ansible\_connection=winrm  
ansible\_winrm\_scheme=http  
ansible\_shell\_type=powershell  
ansible\_port=5985  
ansible\_winrm\_transport=kerberos  
#ansible\_winrm\_kinit\_args=“/opt/CA/uxauth/bin/uxconsole -krb -init”  
asible\_become\_method=runas  
#ansible\_winrm\_server\_cert\_validation=ignore  
ansible\_winrm\_message\_encryption=auto  
validate\_certs=false

Note: I got all the help from ansible documentation, you just need to tweak a bit here and there.