Kerberos Auth - the specified credentials were rejected by the server

Archives Ansible Project
1

Hey.

How do I check the spn? I’ve already applied that pull to pywinrm…

Thanks.

Michael

2

Also might want to check reverse DNS entry for the host your connecting to. It needs to be resolvable from the Ansible node.

3

Something like this will do it: https://social.technet.microsoft.com/wiki/contents/articles/18996.list-all-spns-used-in-your-active-directory.aspx

Oftentimes it’s some random piece of software that reassigns a host’s HTTP SPNs to do Kerberos in IIS with a custom user account. Normally the HTTP SPN is “implicit”, so it shouldn’t be assigned anywhere.