# Kerberos auth failure: kinit: Password incorrect while getting initial credentials **URL:** \ **Category:** AWX Project\ **Tags:** windows, awx, kubernetes\ **Created:** [April 12, 2018, 3:38pm UTC](https://forum.ansible.com/t/kerberos-auth-failure-kinit-password-incorrect-while-getting-initial-credentials/27260 "2018-04-12T15:38:31Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Jonay\_Herrera\_y\_Stee](https://avatars.discourse-cdn.com/v4/letter/j/8c91f0/32.png) [@Jonay\_Herrera\_y\_Stee](https://forum.ansible.com/u/Jonay_Herrera_y_Stee)\ **Post date:** [April 12, 2018, 3:38pm UTC](https://forum.ansible.com/t/kerberos-auth-failure-kinit-password-incorrect-while-getting-initial-credentials/27260/1 "2018-04-12T15:38:31Z")
hi, I am new with awx and try for a project to use awx. I have installed awx on openshift and it is running. but when I try to launch a job to a windows server I have this error: ` { “msg”: “Kerberos auth failure: kinit: Password incorrect while getting initial credentials”, “unreachable”: true, “changed”: false } ` when I look the awx pod throught the terminal, I see this packages already installed : ` sh-4.2$ rpm -qa |grep krb krb5-workstation-1.15.1-8.el7.x86\_64 krb5-libs-1.15.1-8.el7.x86\_64 do I need to configure more to have a connection with the windows server ? more info implementation awx on openshift: 7514756@s51lv02:~ $ oc project awx Now using project “awx” on server “[https://ocp3-191.cmcdev.be:8443](https://ocp3-191.cmcdev.be:8443)”. 7514756@s51lv02:~ $ oc get pods NAME READY STATUS RESTARTS AGE awx-1989311464-xvmgb 4/4 Running 0 21d etcd-3061249660-bm4jp 1/1 Running 0 21d postgresql-5-2hx4j 1/1 Running 0 21d 7514756@s51lv02:~ $ oc describe pod awx-1989311464-xvmgb Name: awx-1989311464-xvmgb Namespace: awx Node: s51lv0m.cmcdev.be/10.151.189.11 Start Time: Thu, 22 Mar 2018 12:51:34 +0100 Labels: name=awx-web-deploy pod-template-hash=1989311464 service=django Annotations: [kubernetes.io/created-by=](http://kubernetes.io/created-by=){“kind”:“SerializedReference”,“apiVersion”:“v1”,“reference”:{“kind”:“ReplicaSet”,“namespace”:“awx”,“name”:“awx-1989311464”,“uid”:“cb352e83-2214-11e8-ba7a-005056beeb06”,"apiVer… [openshift.io/scc=restricted](http://openshift.io/scc=restricted) Status: Running IP: 10.130.3.121 Created By: ReplicaSet/awx-1989311464 Controlled By: ReplicaSet/awx-1989311464 Containers: awx-web: Container ID: docker://15e7ce771e2eae6347a74412160e541de963ec2909bdec688c1ac1633110f05f Image: ansible/awx\_web:latest Image ID: docker-pullable://docker.io/ansible/awx\_web@sha256:cd597f5d548924224ddd2dd32a2dc0e77776bd347e490bf7bdbdd4a240df02bd Port: 8052/TCP State: Running Started: Thu, 22 Mar 2018 12:52:16 +0100 Ready: True Restart Count: 0 Environment: Mounts: /etc/tower from awx-application-config (rw) /var/run/secrets/kubernetes.io/serviceaccount from default-token-27d1v (ro) awx-celery: Container ID: docker://8e7be8dbd6aece45ca47bdd7c55f9f7b00ddbd7144e7152d4ca586d719832112 Image: ansible/awx\_task:latest Image ID: docker-pullable://docker.io/ansible/awx\_task@sha256:2515fc2577c9a94ddc3e5418aa8865bcb018bfa4fde036006f425bdaec431b91 Port: State: Running Started: Thu, 22 Mar 2018 12:52:23 +0100 Ready: True Restart Count: 0 Environment: DATABASE\_USER: awx DATABASE\_NAME: awx DATABASE\_HOST: postgresql DATABASE\_PORT: 5432 DATABASE\_PASSWORD: awxpass MEMCACHED\_HOST: localhost RABBITMQ\_HOST: localhost AWX\_ADMIN\_USER: admin AWX\_ADMIN\_PASSWORD: password Mounts: /etc/tower from awx-application-config (rw) /var/run/secrets/kubernetes.io/serviceaccount from default-token-27d1v (ro) awx-rabbit: Container ID: docker://c6f9e8c9ecaa9d61f017934d92d02c39814e1467ea0813368f6c1faf5889057a Image: ansible/awx\_rabbitmq:3.6.14 Image ID: docker-pullable://docker.io/ansible/awx\_rabbitmq@sha256:e0270de0b7fe504c12709cc3cab299a515f12e61618573337e40fa58dafe07ee Port: State: Running Started: Thu, 22 Mar 2018 12:52:33 +0100 Ready: True Restart Count: 0 Environment: MY\_POD\_IP: (v1:status.podIP) RABBITMQ\_USE\_LONGNAME: true RABBITMQ\_ERLANG\_COOKIE: cookiemonster RABBITMQ\_NODENAME: rabbit@$(MY\_POD\_IP) AUTOCLUSTER\_TYPE: etcd AUTOCLUSTER\_DELAY: 60 ETCD\_HOST: etcd AUTOCLUSTER\_CLEANUP: true CLEANUP\_WARN\_ONLY: false CLEANUP\_INTERVAL: 30 RABBITMQ\_DEFAULT\_USER: awx RABBITMQ\_DEFAULT\_PASS: abcdefg RABBITMQ\_DEFAULT\_VHOST: awx RABBITMQ\_CONFIG\_FILE: /etc/rabbitmq/rabbitmq Mounts: /var/run/secrets/kubernetes.io/serviceaccount from default-token-27d1v (ro) awx-memcached: Container ID: docker://c276b8bc49ddf35e41a447355045fb276eefd24d611c45781c4c0888bc0ed86e Image: memcached Image ID: docker-pullable://docker.io/memcached@sha256:919b596677661335c729cb3918b2a997779259028c1793db2a373e18e52a5507 Port: State: Running Started: Thu, 22 Mar 2018 12:52:41 +0100 Ready: True Restart Count: 0 Environment: Mounts: /var/run/secrets/kubernetes.io/serviceaccount from default-token-27d1v (ro) Conditions: Type Status Initialized True Ready True PodScheduled True Volumes: awx-application-config: Type: ConfigMap (a volume populated by a ConfigMap) Name: awx-config Optional: false default-token-27d1v: Type: Secret (a volume populated by a Secret) SecretName: default-token-27d1v Optional: false QoS Class: BestEffort Node-Selectors: purpose=work Tolerations: Events: 7514756@s51lv02:~ $ ` more info about the ansible job: ` ansible-playbook 2.4.3.0 config file = /etc/ansible/ansible.cfg configured module search path = [u’/var/lib/awx/.ansible/plugins/modules’, u’/usr/share/ansible/plugins/modules’] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 2.7.5 (default, Aug 4 2017, 00:39:18) [GCC 4.8.5 20150623 (Red Hat 4.8.5-16)] Using /etc/ansible/ansible.cfg as config file SSH password: setting up inventory plugins Parsed /tmp/awx\_26\_ho\_vZ0/tmpgZOzUM inventory source with script plugin Loading callback plugin awx\_display of type stdout, v2.0 from /usr/lib/python2.7/site-packages/awx/lib/awx\_display\_callback/module.pyc PLAYBOOK: name-generator.yml \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 1 plays in name-generator.yml PLAY [name generator] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 16:59:24 TASK [Gathering Facts] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 16:59:24 Using module file /usr/lib/python2.7/site-packages/ansible/modules/windows/setup.ps1 \ ESTABLISH WINRM CONNECTION FOR USER: 7513981adm@CMCTST.BE on PORT 5986 TO s51w40s.cmctst.be checking if winrm\_host s51w40s.cmctst.be is an IPv6 address creating Kerberos CC at /tmp/tmp0kfp4X calling kinit for principal 7513981adm@CMCTST.BE fatal: [s51w40s.cmctst.be]: UNREACHABLE! =\> { “changed”: false, “msg”: “Kerberos auth failure: kinit: Password incorrect while getting initial credentials”, “unreachable”: true } PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 16:59:24 s51w40s.cmctst.be : ok=0 changed=0 unreachable=1 failed=0 ` thanks in advance, Jonay ---
**Author:** ![thedoubl3j](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/thedoubl3j/32/103_2.png) [@thedoubl3j](https://forum.ansible.com/u/thedoubl3j)\ **Post date:** [April 12, 2018, 6:17pm UTC](https://forum.ansible.com/t/kerberos-auth-failure-kinit-password-incorrect-while-getting-initial-credentials/27260/2 "2018-04-12T18:17:30Z")
hi jonay, has the host machine (the machine you wish to control) been prepped for use with ansible? there are a few things you have to do to use ansible with windows. more can be found here: [http://docs.ansible.com/ansible/latest/user\_guide/windows\_setup.html#winrm-setup](http://docs.ansible.com/ansible/latest/user_guide/windows_setup.html#winrm-setup). I am thinking specifically about the configuration of WinRM on the host. if it has been, we can dive a little deeper. regards, jake ---
**Author:** ![Jonay\_Herrera\_y\_Stee](https://avatars.discourse-cdn.com/v4/letter/j/8c91f0/32.png) [@Jonay\_Herrera\_y\_Stee](https://forum.ansible.com/u/Jonay_Herrera_y_Stee)\ **Post date:** [April 12, 2018, 9:12pm UTC](https://forum.ansible.com/t/kerberos-auth-failure-kinit-password-incorrect-while-getting-initial-credentials/27260/3 "2018-04-12T21:12:47Z")
Hi Jake, Yes, the host windos machine is full configured to be managed by ansible. This I have already test it with Ansible Tower (pay version), but I want to use awx for our non-production enviroments Tower is too expensive for non production enviroments en tests Thanks for your quick feedback ! Kind regards, Jonay ---
**Author:** ![Dong\_Yang](https://avatars.discourse-cdn.com/v4/letter/d/59ef9b/32.png) [@Dong\_Yang](https://forum.ansible.com/u/Dong_Yang)\ **Post date:** [June 13, 2018, 11:58am UTC](https://forum.ansible.com/t/kerberos-auth-failure-kinit-password-incorrect-while-getting-initial-credentials/27260/4 "2018-06-13T11:58:09Z")
Jonay- were you able to do a kinit to obtain a ticket . How is your krb5.conf configured ?