WinRM with Ansible 2.8 and Python 3.7

Archives Ansible Project
1

We have been using Python 2.7 and Ansible 2.7 so far successfully. Just trying to test Ansible 2.8.6 with Python 3.7.5.

I am getting the following error:

pfny5devops03 | UNREACHABLE! => {
“changed”: false,
“msg”: “kerberos: message encryption is set to ‘always’ but the selected auth method kerberos does not support it”,
“unreachable”: true
}

This works fine with an ansible controller that has Python 2.7 and Ansible 2.7 installed.

These are some of our winrm configuration:

ansible_port: 5986
ansible_connection: winrm
ansible_winrm_transport: kerberos
ansible_winrm_server_cert_validation: ignore
ansible_winrm_message_encryption: always
ansible_winrm_kerberos_delegation: true
ansible_winrm_operation_timeout_sec: 60
ansible_winrm_read_timeout_sec: 90

Does anyone know what’s missing?

Thanks,
Subhi.

2

When ansible_winrm_message_encryption: auto, it works. It used to work with Python 2.7 and Ansible 2.7 when ansible_winrm_message_encryption: always was the setting.

3

I’m using below setting and these are working as expected:

ansible_port: “5985”
ansible_connection: “winrm”
ansible_winrm_scheme: “http”
ansible_winrm_transport: “kerberos”
ansible_winrm_server_cert_validation: “ignore”
ansible_winrm_operation_timeout_sec: 20
ansible_winrm_read_timeout_sec: 30