Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiples Domains #185

Open
ltamaster opened this issue Aug 31, 2016 · 0 comments
Open

Multiples Domains #185

ltamaster opened this issue Aug 31, 2016 · 0 comments

Comments

@ltamaster
Copy link

Hi All

I have been working on setting up a winrm connection using kerberos with multiples domains.
I set on my /etc/krb5.conf setting both domains on [realms].

The connection works ok for one domain (the one set on the [libdefaults] through the attribute default_realm). But the connection fail on the other domain (using a domain user on both cases).

(this is the error that i got)
KrbException: Fail to create credential. (63) - No service creds

When i changed for example the default_realm from Domain1 to Domain2, now the connection of Domain2 works (but Domain1 fail with the same error).

Also i tested removing the default_realm, and i that case both connections fails with 401 error.

WinRM Error: Unexpected HTTP response on http://WIN-CR6637OIDK9:5985/wsman: (401)

I would like to know what i am missing on my /etc/krb5.conf in order to make both domains work together.

Thanks

[libdefaults]
default_realm = DOMAIN1.LOCAL

[realms]
DOMAIN1.LOCAL={
kdc = SERVER.DOMAIN1.LOCAL
default_domain=DOMAIN1.LOCAL
}

DOMAIN2.LOCAL={
kdc = SERVER2.DOMAIN2.LOCAL
default_domain=DOMAIN2.LOCAL
auth_to_local_names=DOMAIN2.LOCAL
}

[domain_realm]
.domain1.local = .DOMAIN1.LOCAL
domain1.local = DOMAIN1.LOCAL
.domain2.local = .DOMAIN2.LOCAL
domain2.local = DOMAIN2.LOCAL
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant