KDC has no support for encryption type

Archives Ansible Project
1

When connecting from Ansible 2.3.0.0 to Windows 2008 (not R2) running PowerShell 3.0 I’m getting:

hostname.domain.corp | UNREACHABLE! => { "changed": false, "msg": "kerberos: (('Unspecified GSS failure. Minor code may provide more information', 851968), ('KDC has no support for encryption type', -1765328370)), ssl: 401 Unauthorized. basic auth failed", "unreachable": true }

The same playbook and account work on Windows 2012 servers on the same domain.

Any thoughts?

2

I believe you can get round this by setting the following in your [ibdefaults] section of your krb5.conf

default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5
default_tkt_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5

Hope this helps,

Jon

3

Thanks - that seems to have done the trick