# No Kerberos Credentials available and unspecified GSS Error: Ansible Tower

**URL:** <https://forum.ansible.com/t/no-kerberos-credentials-available-and-unspecified-gss-error-ansible-tower/21349>\
**Category:** Ansible Project\
**Tags:** windows, ubuntu\
**Created:** [May 4, 2016, 3:29am UTC](https://forum.ansible.com/t/no-kerberos-credentials-available-and-unspecified-gss-error-ansible-tower/21349 "2016-05-04T03:29:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chethan\_S](https://avatars.discourse-cdn.com/v4/letter/c/b3f665/32.png) [@Chethan\_S](https://forum.ansible.com/u/Chethan_S)\
**Post date:** [May 4, 2016, 3:29am UTC](https://forum.ansible.com/t/no-kerberos-credentials-available-and-unspecified-gss-error-ansible-tower/21349/1 "2016-05-04T03:29:02Z")

</div>

I have setup my Ansible Tower and Windows Kerberos / Active Directory authentication as specified [here](http://hindenes.com/trondsworking/2015/07/27/ansible-and-windows-configuring-kerberosactive-directory-authentication/). It is the same procedure explained in the official documentation too. For information here is what I did -

1. Installed the suggested Kerberos packages in the Ubuntu server
2. Edited the configuration files as suggested

I could verify that my configuration is working fine by running the kinit command as suggested -

```auto
kinit -C username@DOMAIN.COM

```

The klist command run after that showed the expected information

```auto
klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: username@DOMAIN.COM

Valid starting Expires Service principal
2016-05-03T10:59:04 2016-05-03T20:59:04 krbtgt/DOMAIN.COM@DOMAIN.COM
    renew until 2016-05-04T10:58:59

```

My Ansible Tower inventory contains just one VM, where under the variables in host properties, I have specified the following details -

```auto
ansible_connection: winrm
ansible_port: "5986"
ansible_ssh_user: username@DOMAIN.COM

```

I suppose the password is not necessary since the ticket is obtained through the kinit command. I have tried adding the password above by specifying _ansible\_ssh\_pass_ but that didn’t help.

Now when I run the ‘Job Template’ it fails instantly with this message.

```auto
TASK [setup] *******************************************************************
fatal: [VM-NAME]: FAILED! => {"failed": true, "msg": "kerberos: (('Unspecified GSS failure. Minor code may provide more information', 851968), ('No Kerberos credentials available', -1765328243)), plaintext: 401 Unauthorized."} 

```

How can I resolve this issue?

---

<div class="post-metadata">

**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\
**Post date:** [May 4, 2016, 10:21am UTC](https://forum.ansible.com/t/no-kerberos-credentials-available-and-unspecified-gss-error-ansible-tower/21349/2 "2016-05-04T10:21:37Z")

</div>

For Ansible Tower support see [https://support.ansible.com/hc/en-us](https://support.ansible.com/hc/en-us)

Might be worth checking you have installed the python library that allows python to work with the kerberos libraries

if you start python and run  
import kerberos

if you get an error message then you are missing the python kerberos library.

The only way I know to install that is using pip like this

pip install kerberos

Hope this helps

Jon