# No Kerberos credentials available' **URL:** \ **Category:** Ansible Project\ **Tags:** windows\ **Created:** [April 23, 2015, 5:32pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062 "2015-04-23T17:32:13Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [April 23, 2015, 5:32pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/1 "2015-04-23T17:32:13Z")
I’m running ansible against a windows host for testing purposes. I can get pywinrm working against the host but when I attempt using either a domain account or an account local to the windows host specified in my ansible/hosts file I receive the error specified below. Any help or explanation would be appreciated thank you in advance. Centos: 7Version: ansible 1.9.0.1 /etc/ansible/hosts [windows] corpigs8471b #ntdvwqwebpcp02b [windows:vars] ansible\_connection=winrm [ansible\_ssh\_user=username@domain.fqdn.net](mailto:ansible_ssh_user=username@domain.fqdn.net) ansible\_ssh\_pass=\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* ansible\_ssh\_port=5986 [root@corpigs8471b ansible]# ansible windows -m setup corpigs8471b | FAILED =\> Traceback (most recent call last): File “/usr/lib/python2.7/site-packages/ansible/runner/ **init**.py”, line 582, in \_executor exec\_rc = self.\_executor\_internal(host, new\_stdin) File “/usr/lib/python2.7/site-packages/ansible/runner/ **init**.py”, line 785, in \_executor\_internal return self.\_executor\_internal\_inner(host, self.module\_name, self.module\_args, inject, port, complex\_args=complex\_args) File “/usr/lib/python2.7/site-packages/ansible/runner/ **init**.py”, line 960, in \_executor\_internal\_inner conn = self.connector.connect(actual\_host, actual\_port, actual\_user, actual\_pass, actual\_transport, actual\_private\_key\_file, delegate\_host) File “/usr/lib/python2.7/site-packages/ansible/runner/connection.py”, line 52, in connect self.active = conn.connect() File “/usr/lib/python2.7/site-packages/ansible/runner/connection\_plugins/winrm.py”, line 147, in connect self.protocol = self.\_winrm\_connect() File “/usr/lib/python2.7/site-packages/ansible/runner/connection\_plugins/winrm.py”, line 101, in \_winrm\_connect protocol.send\_message(‘’) File “/usr/lib/python2.7/site-packages/winrm/protocol.py”, line 173, in send\_message return self.transport.send\_message(message) File “/usr/lib/python2.7/site-packages/winrm/transport.py”, line 195, in send\_message krb\_ticket = KerberosTicket(self.krb\_service) File “/usr/lib/python2.7/site-packages/winrm/transport.py”, line 147, in **init** kerberos.authGSSClientStep(krb\_context, ‘’) GSSError: ((‘Unspecified GSS failure. Minor code may provide more information’, 851968), (‘No Kerberos credentials available’, -1765328243)) ---
**Author:** ![Jonathan\_Sabo](https://avatars.discourse-cdn.com/v4/letter/j/bb73d2/32.png) [@Jonathan\_Sabo](https://forum.ansible.com/u/Jonathan_Sabo)\ **Post date:** [April 23, 2015, 6:17pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/2 "2015-04-23T18:17:59Z")
It’s fixed in devel. [https://github.com/ansible/ansible/pull/10664](https://github.com/ansible/ansible/pull/10664) ---
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [April 27, 2015, 4:29pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/3 "2015-04-27T16:29:53Z")
Thank you. How do I upgrade to this version? pip install -Iv ansible==10.6.6.4 --upgrade Or is it best just to upgrade the two files specified in the release. ---
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [April 27, 2015, 4:37pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/4 "2015-04-27T16:37:50Z")
Think this has the correct version1.9.1-0.1.rc1 has it is there a release candidate you recommend ---
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [April 27, 2015, 5:22pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/5 "2015-04-27T17:22:48Z")
As a note I grabbed just those 2 files and updated them and receive the same error. Thanks. I am going to try the full latest release today if I can but having an issue grabbing it from git. We are behind a proxy and git does not appear to work well with cntlm. Going to try pip instead. ---
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [April 27, 2015, 6:55pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/6 "2015-04-27T18:55:45Z")
I downloaded the lastest version and did a source./env-setupNow when I run ansible --version I receive ansible --version ansible 2.0.0 lib/ansible/modules/core: not found - use git submodule update --init lib/ansible/modules/core lib/ansible/modules/extras: not found - use git submodule update --init lib/ansible/modules/extras v2/ansible/modules/core: not found - use git submodule update --init v2/ansible/modules/core v2/ansible/modules/extras: not found - use git submodule update --init v2/ansible/modules/extras configured module search path = None I still receive the kerberose error message. ---
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [April 29, 2015, 2:54pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/7 "2015-04-29T14:54:17Z")
With the latest version I can get this to work with local machine credentials but not ldap. ---
**Author:** ![ken.krog82](https://avatars.discourse-cdn.com/v4/letter/k/df788c/32.png) [@ken.krog82](https://forum.ansible.com/u/ken.krog82)\ **Post date:** [May 1, 2015, 1:34am UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/8 "2015-05-01T01:34:05Z")
As a note I’ve updated to version 2.0 and I’m using local credentials now and avoiding the ldap issue. If I get it to work I’ll post back here. ---
**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\ **Post date:** [May 1, 2015, 5:20pm UTC](https://forum.ansible.com/t/no-kerberos-credentials-available/18062/9 "2015-05-01T17:20:11Z")
Hi, If you want to use domain accounts, by the looks of things you probably need to set up your controller so it is a kerberos client and can acquire the credentials needed in order to connect via kerberos. I suggest searching for ‘kerberos client setup’ for your controller platform. Its probably a case of installing krb5-workstation and then configuring the /etc/krb5.conf file so kerberos knows where your domain controllers are. Usually you can test by running kinit user@DOMAIN (in my experience DOMAIN has to be in upper case). Hope this helps, Jon