# I am trying to ping windows machine, I am using kerberos and everything is setup using domaincontroller information

**URL:** <https://forum.ansible.com/t/i-am-trying-to-ping-windows-machine-i-am-using-kerberos-and-everything-is-setup-using-domaincontroller-information/30411>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [May 23, 2019, 7:55pm UTC](https://forum.ansible.com/t/i-am-trying-to-ping-windows-machine-i-am-using-kerberos-and-everything-is-setup-using-domaincontroller-information/30411 "2019-05-23T19:55:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Narmada\_Karthika](https://avatars.discourse-cdn.com/v4/letter/n/b5e925/32.png) [@Narmada\_Karthika](https://forum.ansible.com/u/Narmada_Karthika)\
**Post date:** [May 23, 2019, 7:55pm UTC](https://forum.ansible.com/t/i-am-trying-to-ping-windows-machine-i-am-using-kerberos-and-everything-is-setup-using-domaincontroller-information/30411/1 "2019-05-23T19:55:08Z")

</div>

[user@server ansible]$ ansible-playbook windows\_ping.yaml -i hosts.txt

PLAY [ping test] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

TASK [Gathering Facts] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
fatal: [[server.domain.com](http://server.domain.com)]: UNREACHABLE! =\> {“changed”: false, “msg”: “kerberos: authGSSClientInit() failed: ((‘Unspecified GSS failure. Minor code may provide more information’, 851968), ("Can’t find client principal [nchitturi@domain.COM](mailto:nchitturi@domain.COM) in cache collection", -1765328243)), ssl: auth method ssl requires a password”, “unreachable”: true}  
[WARNING]: Could not create retry file ‘/ansible/windows\_ping.retry’. [Errno 13] Permission denied: u’/ansible/windows\_ping.retry’

PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
[server.domain.COM](http://server.domain.COM) : ok=0 changed=0 unreachable=1 failed=0

[user@servername ansible]$ klist [nchitturi@DOMAIN.COM](mailto:nchitturi@DOMAIN.COM)  
klist: No credentials cache found (filename: [nchitturi@DOMAIN.COM](mailto:nchitturi@DOMAIN.COM))  
user@servername ansible ansible]$ kinit [nchitturi@DOMAIN.COM](mailto:nchitturi@DOMAIN.COM)  
Password for [nchitturi@domain.COM](mailto:nchitturi@domain.COM)  
[user@servername ansible ansible]$ klist  
Ticket cache: KEYRING:persistent:600437:600437  
Default principal: [nchitturi@DOMAIN.COM](mailto:nchitturi@DOMAIN.COM)

Valid starting Expires Service principal  
05/23/2019 12:44:42 05/23/2019 22:44:42 krbtgt/DOMAIN.COM@DOMAIN.COM  
renew until 05/30/2019 12:44:37

here is my group\_vars/windows.yml file

ansible\_user: [nchitturi@DOMAIN.COM](mailto:nchitturi@DOMAIN.COM)  
ansible\_password: password  
ansible\_port: 5986  
ansible\_connection: winrm  
ansible\_winrm\_transport: kerberos  
ansible\_winrm\_server\_cert\_validation: ignore  
ansible\_winrm\_kerberos\_delegation: true

hosts.txt  
[Servwername.domain.COM](http://Servwername.domain.COM) [ansible\_ssh\_user="nchitturi@DOMAIN.COM](mailto:ansible_ssh_user=%22nchitturi@DOMAIN.COM)" ansible\_connection=“winrm”

but I am getting below error, please suggest me some solution

PLAY [ping test] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

TASK [Gathering Facts] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
fatal: [[server.domain.com](http://server.domain.com)]: UNREACHABLE! =\> {“changed”: false, “msg”: “kerberos: authGSSClientInit() failed: ((‘Unspecified GSS failure. Minor code may provide more information’, 851968), ("Can’t find client principal [nchitturi@domain.COM](mailto:nchitturi@domain.COM) in cache collection", -1765328243)), ssl: auth method ssl requires a password”, “unreachable”: true}  
[WARNING]: Could not create retry file ‘/ansible/windows\_ping.retry’. [Errno 13] Permission denied: u’/ansible/windows\_ping.retry’

---

<div class="post-metadata">

**Author:** ![Narmada\_Karthika](https://avatars.discourse-cdn.com/v4/letter/n/b5e925/32.png) [@Narmada\_Karthika](https://forum.ansible.com/u/Narmada_Karthika)\
**Post date:** [May 24, 2019, 5:18pm UTC](https://forum.ansible.com/t/i-am-trying-to-ping-windows-machine-i-am-using-kerberos-and-everything-is-setup-using-domaincontroller-information/30411/2 "2019-05-24T17:18:16Z")

</div>

Can someone please help me…

---

<div class="post-metadata">

**Author:** ![Oliver](https://avatars.discourse-cdn.com/v4/letter/o/85f322/32.png) [@Oliver](https://forum.ansible.com/u/Oliver)\
**Post date:** [May 25, 2019, 4:49pm UTC](https://forum.ansible.com/t/i-am-trying-to-ping-windows-machine-i-am-using-kerberos-and-everything-is-setup-using-domaincontroller-information/30411/3 "2019-05-25T16:49:24Z")

</div>

Use ansible\_port=5985 in the configuration instead of 5986

---

<div class="post-metadata">

**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\
**Post date:** [May 27, 2019, 7:57am UTC](https://forum.ansible.com/t/i-am-trying-to-ping-windows-machine-i-am-using-kerberos-and-everything-is-setup-using-domaincontroller-information/30411/4 "2019-05-27T07:57:16Z")

</div>

A couple of other suggestions.

Is your machine really registered in DNS as ‘[server.domain.com](http://server.domain.com)’? Kerberos really needs DNS lookups to work properly - so if you can ping it and nslookup the host and get back the correct ip address, that’s well worth checking as it will not work unless the machine name is properly resolvable.

I suggest working through all the suggestions here: [https://docs.ansible.com/ansible/latest/user\_guide/windows\_winrm.html#troubleshooting-kerberos](https://docs.ansible.com/ansible/latest/user_guide/windows_winrm.html#troubleshooting-kerberos)

Also I’m not sure ansible will be able to read your kerberos ticket from the keyring. I have definitely had success with file based credential cache, so worth checking your krb5.conf and environment variables for KRB5CC settings which could be interfering with the kerberos setup that ansible expects.

Hope this helps,

Jon