# Kerberos Authentication Failed | kerberos: authGSSClientStep() failed | Help URGENT **URL:** \ **Category:** Ansible Project\ **Tags:** windows\ **Created:** [October 2, 2019, 12:07pm UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408 "2019-10-02T12:07:13Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Piyush\_Bansal](https://avatars.discourse-cdn.com/v4/letter/p/50afbb/32.png) [@Piyush\_Bansal](https://forum.ansible.com/u/Piyush_Bansal)\ **Post date:** [October 2, 2019, 12:07pm UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/1 "2019-10-02T12:07:13Z")
Hello, I am trying to use Windows-2008-R2 AD domain authentication for my windows infrastructure playbooks however its failing with following error: Also tried just for win\_ping and ping but still everything fails. ERROR: ---
**Author:** ![nandha\_kumar1](https://avatars.discourse-cdn.com/v4/letter/n/90db22/32.png) [@nandha\_kumar1](https://forum.ansible.com/u/nandha_kumar1)\ **Post date:** [October 2, 2019, 12:16pm UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/2 "2019-10-02T12:16:55Z")
Ansible winrm transport parameter try to use ntlm…not kerboroes…it might work ---
**Author:** ![Piyush\_Bansal](https://avatars.discourse-cdn.com/v4/letter/p/50afbb/32.png) [@Piyush\_Bansal](https://forum.ansible.com/u/Piyush_Bansal)\ **Post date:** [October 3, 2019, 6:57am UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/3 "2019-10-03T06:57:01Z")
Hello Nandha, Thanks for writing me but we have to use kerberos authentication due to security reasons. So, need some help to troubleshoot this issue ---
**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\ **Post date:** [October 3, 2019, 7:16am UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/4 "2019-10-03T07:16:10Z")
I suspect the issue is to do with resolving the hostname, so potentially an issue with DNS. Although you are using hostnames in your ansible inventory, it appears from the trace output that you are actually connecting via an IP address - 192.168.169.131 Kerberos requires DNS to be fully working. So you need to be able to nslookup and get the ip from the hostname _and_ also be able to resolve the hostname from the ip address, otherwise it won’t work. Kerberos, like https, deals in hostnames, not IPs, so its not surprising that it can’t find the server by name when it is receiving an ip address. I hope this helps, Jon ---
**Author:** ![Piyush\_Bansal](https://avatars.discourse-cdn.com/v4/letter/p/50afbb/32.png) [@Piyush\_Bansal](https://forum.ansible.com/u/Piyush_Bansal)\ **Post date:** [October 4, 2019, 7:38am UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/5 "2019-10-04T07:38:50Z")
Hello J Hawkesworth, I would like to thank you very much for the suggestion. Issue got resolved now. Thanks for your help 🙂 Thanks, Piyush ---
**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\ **Post date:** [October 4, 2019, 8:39pm UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/6 "2019-10-04T20:39:33Z")
Glad to hear it. ---
**Author:** ![Carlos\_De\_La\_Paz](https://avatars.discourse-cdn.com/v4/letter/c/d6d6ee/32.png) [@Carlos\_De\_La\_Paz](https://forum.ansible.com/u/Carlos_De_La_Paz)\ **Post date:** [April 3, 2020, 8:02pm UTC](https://forum.ansible.com/t/kerberos-authentication-failed-kerberos-authgssclientstep-failed-help-urgent/31408/7 "2020-04-03T20:02:32Z")
Piyush, Can you please share how it was resolved? We are having a similar issue. Thanks.